nanog mailing list archives
Re: Sprint (1239) blackhole ? Or bogus /32 route ?
From: Vinny Abello <vinny () tellurian com>
Date: Thu, 26 Sep 2002 13:31:34 -0400
Here's what I see: BGP routing table entry for 199.212.134.0/24, version 5658446 Paths: (3 available, best #2, table Default-IP-Routing-Table) Advertised to peer-groups: tn-core 18984 3561 852 11647 216.182.0.33 (metric 2965760) from 216.182.0.33 (216.182.0.33) Origin IGP, localpref 100, valid, internal Community: 233373696 1244135434 1239 852 11647 144.228.242.224 from 144.228.242.224 (144.228.242.224) Origin IGP, localpref 100, valid, external, best 1239 852 11647, (received-only) 144.228.242.224 from 144.228.242.224 (144.228.242.224) Origin IGP, metric 49, localpref 100, valid, external core1-nwtnj#trace 199.212.134.9 Type escape sequence to abort. Tracing the route to smtp2.sentex.ca (199.212.134.9) 1 sl-gw32-pen-6-0-0-TS21.sprintlink.net (144.223.38.121) [AS 1239] 4 msec sl-gw32-pen-1-0-0-TS18.sprintlink.net (144.223.15.121) [AS 1239] 4 msec sl-gw32-pen-1-0-0-TS21.sprintlink.net (144.223.15.125) [AS 1239] 20 msec 2 sl-bb20-pen-0-0.sprintlink.net (144.232.16.241) [AS 1239] !H * !HLooks like something isn't right... I see the announcement from Sprint with an AS path of 1239 852 11647, but it never gets past one of the routers on Sprint's network. I have no problem going through Cable and Wireless:
Type escape sequence to abort. Tracing the route to smtp2.sentex.ca (199.212.134.9)1 63-121-101-106.focaldata.net (63.121.101.106) [AS 18984] 0 msec 0 msec 0 msec 2 acr2-so-3-3-0.newyork.cw.net (206.24.193.153) [AS 3561] 0 msec 4 msec 0 msec
3 agr4-loopback.newyork.cw.net (206.24.194.104) [AS 3561] 4 msec 0 msec agr3-loopback.newyork.cw.net (206.24.194.103) [AS 3561] 4 msec 4 dcr1-so-7-2-0.newyork.cw.net (206.24.207.73) [AS 3561] 4 msec dcr1-so-6-2-0.newyork.cw.net (206.24.207.57) [AS 3561] 0 msec dcr1-so-7-3-0.newyork.cw.net (206.24.207.77) [AS 3561] 4 msec5 telus-services-inc.newyork.cw.net (206.24.207.90) [AS 3561] 24 msec 24 msec 20 msec
6 toroonnlbr00.bb.telus.com (154.11.11.130) [AS 852] 20 msec 24 msec 20 msec 7 toroonzddr00.bb.telus.com (154.11.6.67) [AS 852] 24 msec 24 msec 20 msec8 peer.toroonzddr00.bb.telus.com (209.115.141.5) [AS 852] 28 msec 28 msec 32 msec
9 iolite.sentex.ca (209.112.4.3) [AS 15290] 24 msec 24 msec 24 msec 10 smtp2.sentex.ca (199.212.134.9) [AS 11647] 28 msec 24 msec 32 msec I would contact Sprint. Good luck! At 01:12 PM 9/26/2002 -0400, Mike Tancsa wrote:
Hi,I am trying to figure out if either sprint (as1239) has blackholed a single IP address in my network or something strange is up. If anyone has transit connectivity to AS1239, can you tell me if Sprint is sending 199.212.134.9/32 as a prefix ??e.g. from as1239's website looking glass http://oxide.sprintlink.net/cgi-bin/glass.pl (only a traceroute interface)sl-bb20-ana>trace 199.212.134.9 Type escape sequence to abort. Tracing the route to smtp2.sentex.ca (199.212.134.9) 1 * * * Yet, on that same subnet all else is fine sl-bb20-ana>trace 199.212.134.1 Type escape sequence to abort. Tracing the route to ns.sentex.ca (199.212.134.1) 1 sl-bb22-ana-14-0.sprintlink.net (144.232.1.177) 4 msec sl-bb23-fw-10-2.sprintlink.net (144.232.18.241) 24 msec sl-bb22-ana-14-0.sprintlink.net (144.232.1.177) 0 msec 2 sl-bb25-chi-6-0.sprintlink.net (144.232.9.25) 56 msec sl-bb22-fw-10-1.sprintlink.net (144.232.9.250) 24 msec sl-bb25-chi-6-0.sprintlink.net (144.232.9.25) 52 msec 3 sl-bb22-chi-11-0.sprintlink.net (144.232.18.121) 48 msec sl-bb25-chi-15-0.sprintlink.net (144.232.26.82) 52 msec sl-bb22-chi-11-0.sprintlink.net (144.232.18.121) 44 msec 4 sl-gw33-chi-10-0.sprintlink.net (144.232.26.42) 52 msec sl-gw33-chi-9-0.sprintlink.net (144.232.26.22) 60 msec sl-gw33-chi-10-0.sprintlink.net (144.232.26.42) 48 msec 5 sl-splk-telus-1-0.sprintlink.net (144.223.35.30) 48 msec 52 msec 48 msec 6 chcnil23gr01.bb.telus.com (154.11.11.90) [AS 852] 48 msec chcnil23gr01.bb.telus.com (154.11.11.94) [AS 852] 48 msec chcnil23gr01.bb.telus.com (154.11.11.90) [AS 852] 48 msec 7 toroonxnbr00.bb.telus.com (154.11.11.5) [AS 852] 56 msec 64 msec 56 msec 8 toroonzddr00.bb.telus.com (154.11.6.67) [AS 852] 64 msec 56 msec 64 msec9 peer.toroonzddr00.bb.telus.com (209.115.141.5) [AS 852] 60 msec 64 msec 64 msec10 iolite.sentex.ca (209.112.4.3) [AS 15290] 64 msec 60 msec 64 msec 11 ns.sentex.ca (199.212.134.1) [AS 11647] 64 msec 64 msec 60 msec sl-bb20-ana>I am guessing a blackhole, but I dont see where they told me or what list that IP address is on... www.openrbl.org shows clean and all the box does is outbound smtp...Anyone else see strange things like this ? ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike () sentex net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike
Vinny Abello Network Engineer Server Management vinny () tellurian com (973)300-9211 x 125 (973)940-6125 (Direct) PGP Key Fingerprint: 3BC5 9A48 FC78 03D3 82E0 E935 5325 FBCB 0100 977A Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com (888)TELLURIAN
Current thread:
- Sprint (1239) blackhole ? Or bogus /32 route ? Mike Tancsa (Sep 26)
- Re: Sprint (1239) blackhole ? Or bogus /32 route ? Vinny Abello (Sep 26)
- Re: Sprint (1239) blackhole ? Or bogus /32 route ? Mike Tancsa (Sep 26)
- Re: Sprint (1239) blackhole ? Or bogus /32 route ? Mike Tancsa (Sep 26)
- Re: Sprint (1239) blackhole ? Or bogus /32 route ? Vinny Abello (Sep 26)
- Re: Sprint (1239) blackhole ? Or bogus /32 route ? Mike Tancsa (Sep 26)
- Re: Sprint (1239) blackhole ? Or bogus /32 route ? Mike Tancsa (Sep 26)
- Re: Sprint (1239) blackhole ? Or bogus /32 route ? Vinny Abello (Sep 26)