3 ms·

I would guess it has something to do with cisco asking them to help alleviate issues with their 1.1.1.1 squatting on a bunch of devices. I tested it when it cam

I would guess it has something to do with cisco asking them to help alleviate issues with their 1.1.1.1 squatting on a bunch of devices. I tested it when it came out, and if I set my DNS to 1.1.1.1, then logged into a hotel wireless network (that I knew was running those devices), as soon as a request was made, I was logged out of the captive portal. I would have expected 1.1.1.1 to already be blocked if anyone filters on bogon-space (or has dealt with i Is there a database of who blocks what? I searched but didn't find a collection anywhere. Unless we are looking at port 25 and whatnot. Yes, it is not allowing you to use a (not technically)-arbitrary port, but most would agree that the internet is better off for that.

colechristensen 8y ago
1/8 hasn't been "bogus" since 1/2010. ( http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xhtml http://www.iana.org/assignments/ipv4-address-space/ipv4-addr... ) Using unallocated IPs for "internal" or bogus purposes is sketchy, continuing to use them after they are allocated is something else. Especially so nearly a decade on.
- notdonspaulding 8y ago
  The wheels of technological change in the Telecom space turn very, VERY slowly. Not upgrading equipment and configs for 10 years is nothing in the ISP world.
  - crankylinuxuser 8y ago
    You'd be scarily surprised just how much telecommunications runs on Perl5 ranging around the ~150GB level. I had my stint at an ISP that worked with around 40 state level and national orgs. I saw the underbelly of how things work, and its frankly scary.
    - gpvos 8y ago
      Nothing wrong with Perl5 though.
      - crankylinuxuser 8y ago
        There is when much of the code was "write once, read never". There's more than a a few dozen MB blobs of dense perl5 code that we had no clue what it actually did, and was told not to touch it, lest many things break. I had to end up touching one of them, because of things breaking with that subsystem and the new ticketing system that was being implemented. It had the wonderful line database_user = root database_password = [current mysql root password] Lest to say, I no longer work there.
        TeMPOraL 8y ago
        Every time I write some crap code at work, someone on HN tells a story about such horrors that I no longer feel bad. Thanks for making my day better :).
technion 8y ago
The most referred to bogon list is Team Cymru: https://www.team-cymru.com/bogon-reference.html https://www.team-cymru.com/bogon-reference.html This team provide a great side service - you can setup BGP with them using an internal AS. It's one of the few ways you can get practical experience setting up BGP in the home with a third party. I'm running it right now.
nailer 8y ago
For anyone else wondering: > A bogon prefix is a route that should never appear in the Internet routing table. A packet routed over the public Internet (not including over VPNs or other tunnels) should never have a source address in a bogon range. These are commonly found as the source addresses of DDoS attacks.

colechristensen 8y ago

1/8 hasn't been "bogus" since 1/2010. ( http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xhtml http://www.iana.org/assignments/ipv4-address-space/ipv4-addr... ) Using unallocated IPs for "internal" or bogus purposes is sketchy, continuing to use them after they are allocated is something else. Especially so nearly a decade on.

notdonspaulding 8y ago
The wheels of technological change in the Telecom space turn very, VERY slowly. Not upgrading equipment and configs for 10 years is nothing in the ISP world.
- crankylinuxuser 8y ago
  You'd be scarily surprised just how much telecommunications runs on Perl5 ranging around the ~150GB level. I had my stint at an ISP that worked with around 40 state level and national orgs. I saw the underbelly of how things work, and its frankly scary.
  - gpvos 8y ago
    Nothing wrong with Perl5 though.
    - crankylinuxuser 8y ago
      There is when much of the code was "write once, read never". There's more than a a few dozen MB blobs of dense perl5 code that we had no clue what it actually did, and was told not to touch it, lest many things break. I had to end up touching one of them, because of things breaking with that subsystem and the new ticketing system that was being implemented. It had the wonderful line database_user = root database_password = [current mysql root password] Lest to say, I no longer work there.
      - TeMPOraL 8y ago
        Every time I write some crap code at work, someone on HN tells a story about such horrors that I no longer feel bad. Thanks for making my day better :).

technion 8y ago

The most referred to bogon list is Team Cymru: https://www.team-cymru.com/bogon-reference.html https://www.team-cymru.com/bogon-reference.html This team provide a great side service - you can setup BGP with them using an internal AS. It's one of the few ways you can get practical experience setting up BGP in the home with a third party. I'm running it right now.

nailer 8y ago

For anyone else wondering: > A bogon prefix is a route that should never appear in the Internet routing table. A packet routed over the public Internet (not including over VPNs or other tunnels) should never have a source address in a bogon range. These are commonly found as the source addresses of DDoS attacks.