4 ms·

A German podcaster who has been working on networks for decades once said that he owns a large chunk of public IP addresses in the 192.68.0.0/16 subnet and it's

A German podcaster who has been working on networks for decades once said that he owns a large chunk of public IP addresses in the 192.68.0.0/16 subnet and it's impossible for him to use it because once he activates it he basically gets a DDOS of misdirected traffic. So many misconfigured networks out there...

deleted 9y ago
[deleted]
justanone 9y ago
Freakshow \o/
- skrause 9y ago
  I can understand why this comment was downvoted without any further context, but yes, the podcaster's name is Clemens Schrimpe and he probably mentioned that fact in the German podcast "Freak Show": https://freakshow.fm/ https://freakshow.fm/
  - Dunedan 9y ago
    According to the show notes at least in FS117: https://freakshow.fm/fs117-yksi-kaksi https://freakshow.fm/fs117-yksi-kaksi
walrus01 9y ago
Did he say what the volume was in Gbps? Consideirng the market value of a /16 now for residential use DHCP pools, it could be easily leased via LOA to a huge ISP that would get most of the shit traffic via settlement free peering on N x 10/100Gbps ports, distributed between many cities. If it's like 15Gbps of constant junk I could still find a way to make it useful. Probably would need to nullroute the most common /24s like 192.68.1.0/24 , so you'd lose the equivalent of a /22 to that.
jsjohnst 9y ago
I solidly feel it’s a cop out for an ISP to not filter their traffic to block spoofed IPs. In my eyes, there’s zero legitimate reason that this guy should get flooded, but alas, our industry gets lazier and more careless each year.
- walrus01 9y ago
  There is no spoofing involved there. We're talking about typos of 192.168 (private space) typed as 192.68 which is "real" space. It is not like ISPs are leaking rfc1918 IP space.
  - jsjohnst 9y ago
    Very true that it is a typo, which I had noticed, and thanks for calling out. Still doesn’t invalidate my point though. My theory is that a lot of that traffic is likely coming from spoofed IPs as I doubt there would be substantial sustained legitimate, but improperly directed, traffic. My guess is a lot of it is shoddily written malicious traffic.
    - always_good 9y ago
      Also, outbound traffic needs to be expensive, not free like it is now. There simply shouldn't exist the scenario where a household is unaware that their hijacked toasters has been saturating their upload for months. It seems unfair, but these are solutions that actually work. Waiting for things to fix themselves clearly isn't. We're quickly entering a reality where everyone will be using Cloudflare instead of just most of us. It's pretty incredible how far naive decentralization got us, though. Soon we're going to be looking back in awe.
    - bradknowles 9y ago
      Google for “BCP 38”. This pain has been known for many, many years.
      - jsjohnst 9y ago

deleted 9y ago

[deleted]

justanone 9y ago

Freakshow \o/

skrause 9y ago
I can understand why this comment was downvoted without any further context, but yes, the podcaster's name is Clemens Schrimpe and he probably mentioned that fact in the German podcast "Freak Show": https://freakshow.fm/ https://freakshow.fm/
- Dunedan 9y ago
  According to the show notes at least in FS117: https://freakshow.fm/fs117-yksi-kaksi https://freakshow.fm/fs117-yksi-kaksi

walrus01 9y ago

Did he say what the volume was in Gbps? Consideirng the market value of a /16 now for residential use DHCP pools, it could be easily leased via LOA to a huge ISP that would get most of the shit traffic via settlement free peering on N x 10/100Gbps ports, distributed between many cities. If it's like 15Gbps of constant junk I could still find a way to make it useful. Probably would need to nullroute the most common /24s like 192.68.1.0/24 , so you'd lose the equivalent of a /22 to that.

jsjohnst 9y ago

I solidly feel it’s a cop out for an ISP to not filter their traffic to block spoofed IPs. In my eyes, there’s zero legitimate reason that this guy should get flooded, but alas, our industry gets lazier and more careless each year.

walrus01 9y ago
There is no spoofing involved there. We're talking about typos of 192.168 (private space) typed as 192.68 which is "real" space. It is not like ISPs are leaking rfc1918 IP space.
- jsjohnst 9y ago
  Very true that it is a typo, which I had noticed, and thanks for calling out. Still doesn’t invalidate my point though. My theory is that a lot of that traffic is likely coming from spoofed IPs as I doubt there would be substantial sustained legitimate, but improperly directed, traffic. My guess is a lot of it is shoddily written malicious traffic.
  - always_good 9y ago
    Also, outbound traffic needs to be expensive, not free like it is now. There simply shouldn't exist the scenario where a household is unaware that their hijacked toasters has been saturating their upload for months. It seems unfair, but these are solutions that actually work. Waiting for things to fix themselves clearly isn't. We're quickly entering a reality where everyone will be using Cloudflare instead of just most of us. It's pretty incredible how far naive decentralization got us, though. Soon we're going to be looking back in awe.
  - bradknowles 9y ago
    Google for “BCP 38”. This pain has been known for many, many years.
    - jsjohnst 9y ago