Help on setting up a new block

Wed Mar 20 15:28:05 UTC 2019

I found an interesting pattern.  I see a lot of traffic stopping at
softlayer.com.  Big datacenter?  Could they be doing some blocking?

John

On Wed, Mar 20, 2019 at 10:31 AM Filip Hruska <fhr at fhrnet.eu> wrote:

> I would start with basic stuff first.
>
> Traceroutes to check if/where the packets are being dropped. If the path
> is clear, then it's probably a HTTP level block, in which case figure out
> if these companies share the same CDN/web protection solution/hoster. If
> that's the case, contact them directly.
>
> Regards,
> Filip Hruska
>
> On 20 March 2019 3:02:13 pm GMT+01:00, John Alcock <john at alcock.org>
> wrote:
>>
>> Odd Issues
>>
>> We recently went through an IP Broker and bought a /18 worth of IP's
>>
>> I am listing all my information below.  Should be public record.
>>
>> AS Number/Range 395437
>> AS Handle AS395437
>> AS Name HIGHLANDTEL
>> RPKI Certified Yes
>>
>> As for the IP Block
>>
>> Net Range 138.43.128.0 - 138.43.191.255
>> CIDR 138.43.128.0/18
>> Net Name HCL-73
>> Net Handle NET-138-43-128-0-1
>> Net Type Direct Allocation
>> Parent NET-138-0-0-0-0 (VR-ARIN)
>> RPKI Certified Yes
>>
>> In addition, I believe I got all the information in the IRR.  I am
>> unclear on this part, but I do know ATT is happy now.  I can pass traffic
>> through their network.
>>
>> whois -h whois.bgpmon.net " --roa 395437 138.43.128.0/24"
>>
>> 0 - Valid
>> ------------------------
>> ROA Details
>> ------------------------
>> Origin ASN:       AS395437
>> Not valid Before: 2019-02-13 05:00:00
>> Not valid After:  2029-02-01 05:00:00  Expires in
>> 9y318d10h46m2.39999997615814s
>> Trust Anchor:     rpki.arin.net
>> Prefixes:         138.43.128.0/18 (max length /24)
>>
>>
>> So here is my problem.  There are certain sites I can not get to on the
>> new ip block.
>>
>> clover.com - They are a large POS vendor catering to small business
>> idrive.com - Online backup
>> heart.org - american heart association
>> onlineproviderservices.com - Looks like an outsourced group that handles
>> medicare
>> landstar.com - trucking company
>>
>> I am working on trying to contact the companies above, but I have started
>> resorting to public shaming on social media.  Not an ideal solution.
>>
>> My thought, could I be missing something?  Perhaps I need to add a
>> specfic entry in the IRR or anything?  Just seems like a lot of sites will
>> not accept my traffic.
>>
>> Any experts like to chime in?
>>
>> John
>>
>
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190320/3fc9925f/attachment.html>