[lacnog] IP Squatting en la region?

Hernan Moguilevsky - NOC CABASE noc.hernan en cabase.org.ar
Lun Feb 9 11:55:49 BRST 2015


Hay que tener ganas de usurparle al Ministerio de Defensa Britanico...
Por lo menos se puede decir que son ¿valientes?!
:-)

“Each Hamachi client is normally assigned an IP address when it logs into the system for the first time. To avoid conflicting with existing private networks on the client side the normal private IP address blocks 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16 are not used.
Before November 19, 2012 the 5.0.0.0/8 range was used. This range was previously unallocated but was allocated to RIPE NCC in late 2010 and space from this range is now being used by hosting providers on the public internet. Hamachi switched to the 25.0.0.0/8 block.[2]
The 25.0.0.0/8 block is allocated to the British Ministry of Defence. Organisations who need to communicate with the MOD may experience problems when more specific Internet routes attract traffic that was meant for internal hosts, or alternatively find themselves unable to reach the legitimate users of those addresses because those addresses are being used internally,[3] and such "squatting" is against the established practice of the Internet.”


Hernan Moguilevsky
NOC CABASE
 
Suipacha 128 - Piso 3°  F
C1008AAD Buenos Aires - Argentina
Tel: (54-11) 4326-0777 int. 9109
www.cabase.org.ar

De: LACNOG [mailto:lacnog-bounces en lacnic.net] En nombre de Roque Gagliano
Enviado el: lunes, 09 de febrero de 2015 06:58 a.m.
Para: Latin America and Caribbean Region Network Operators Group
Asunto: Re: [lacnog] IP Squatting en la region?

Ricardo,

Aquí la razón por la que te "sonaba" el bloque 5.0.0.0/8:

http://en.wikipedia.org/wiki/LogMeIn_Hamachi
Saludos,
Roque

On Sat, Feb 7, 2015 at 11:35 PM, Ricardo Patara <patara en registro.br> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am not sure that is the case but when I read "5.x.x.x" it ring a bell.
There was an NAT equipment from an big manufacturer pre configured
with 5/8 as "internal" network for NATing.
It was a long time ago, not sure this equipment is still on the
market, not sure either this is the case.

Regards,

  Ricardo Patara

On 07/02/15 00:04, Doug Madory wrote:
> Hola Andres,
>
> I don't see Claro (or any other Colombian provider) globally
> announcing any IP address space in 5.x.x.x range.
>
> However, they could be internally numbering with this address space
> and that could cause a problem for their customers. There are many
> cases of providers around the world using global IP addresses for
> internal numbering, which is a risky practice.
>
> Can anyone with Claro Colombia residential service post a
> traceroute to one of the affected IPs? Por ejemplo: 5.9.66.150
>
> Gracias, Doug
>
> Doug Madory Director of Internet Analysis, Dyn @dynresearch
> Hanover, NH                      +1 603-263-6868
>
> Dyn is a cloud-based Internet Performance company
> http://dyn.com/about/
>
>
>
> _______________________________________________ LACNOG mailing
> list LACNOG en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog Cancelar
> suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJU1pNNAAoJEGUUwTbBsH6WGZgIAJ2gZU3NcQEN3Cjjg6gdvYP8
34BPE9EBPPMq2Xw5w4nL6l18kQjguIFIxgawiA0CV97HBHrMg3mWStdVLSj1JIYt
FEFd4j88uDgzEe0YrHIPWxUWWDLr3T0c68fR/VK1DFC8nSgnVXUqOZeT8puEOdtq
QpyFtjrWH8sc1gxSyC/h0nQ2iGE/ILToMriRen6u9b+lERwwAStnjJBMkGCKkv2+
UlPu59fP8/0T6WXFZYG0tspFOScHoHGQtTVN03nql9KN/MLJu9Dcg+Pp+76l8GSp
qbAxlCOg0wqH2FpDRADSe2YujPTtl0I8gX7456F/3S7DQmzSUWXBTkt7kTBGB+M=
=qFNX
-----END PGP SIGNATURE-----
_______________________________________________
LACNOG mailing list
LACNOG en lacnic.net
https://mail.lacnic.net/mailman/listinfo/lacnog
Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog



-- 


At least I did something
Don Draper - Mad Men




Más información sobre la lista de distribución LACNOG