UUNet goon

Wed Dec 9 15:24:27 UTC 1998

I'm wondering why someone at UUNet decided to start announcing a /24
(209.113.17.0) out of our ARIN assigned /17 (209.113.0.0).  

>whois 209.113.17.0 at whois.arin.net
[whois.arin.net]
Insync Internet Services (NETBLK-INSYNC3)
   5555 San Felipe, Suite 700
   Houston, TX 77056
   US

   Netname: INSYNC3
   Netblock: 209.113.0.0 - 209.113.127.255
   Maintainer: SYNC

An example from Nitrous (MAE West):

BGP routing table entry for 209.113.17.0/24, version 335267
Paths: (6 available, best #1)
  701
    165.117.52.234 (metric 14) from 165.117.1.145
      Origin IGP, metric 4294967294, localpref 100, valid, internal, best
      Community: 2548:186 2548:666 3706:153
      Originator : 165.117.1.145, Cluster list: 165.117.1.145
  701
    206.181.125.154 (metric 52) from 165.117.1.57
      Origin IGP, metric 4294967294, localpref 100, valid, internal
      Community: 2548:219 2548:666 3706:120
      Originator : 165.117.1.57, Cluster list: 165.117.1.57

[SNIP]

And here's our /17 from MAE West (5003 is us):

BGP routing table entry for 209.113.0.0/17, version 102340
Paths: (14 available, best #13, advertised over IBGP)
  3561 3831 5003, (aggregated by 5003 10.10.10.12)
    192.157.69.48 (metric 47) from 165.117.1.120
      Origin IGP, metric 4294967294, localpref 100, valid, internal,
atomic-aggregate
      Community: 2548:202 2548:666 3706:143
  701 5003 5003, (aggregated by 5003 10.10.10.8)
    137.39.140.21 (metric 70) from 165.117.1.76
      Origin IGP, metric 4294967294, localpref 100, valid, internal,
atomic-aggregate
      Community: 2548:254 2548:666 3706:102
      Originator : 165.117.1.76, Cluster list: 165.117.1.76

It appears that one of our previous customers who was assigned that class
C by us decided to buy a T1 from UUNet and UUNet let them use our IP
space.  What kind of checks are usually done when peolpe come to the NSP's
with other people's address space?  A simple check at ARIN would have
shown that the entire /17 is our IP space.  What really chaps my ass is
we're a UUNet multi-meg customer and so far I'm fighting to have to get
them to stop blackholing my IP space.  I guess their guaranteed service
clause is going to come in handy this month.  I smell a free month of
service coming.

--
Joseph Shaw        - jshaw at insync.net
NetAdmin/Security  - Insync Internet Services
Free UNIX advocate - "I hack, therefore I am."