Bogus bogon?

Mon Jul 8 14:37:30 UTC 2002

Something looks wrong here:

; host ns.eu.sun.com
ns.eu.sun.com           A       192.18.1.3
; wget -q -O- http://www.cymru.com/Documents/bogon-dd.html | grep '192.18'
<B>192.18.0.0 255.254.0.0</B><BR>
<B>192.18.0.0 255.254.0.0</B><BR>
<B>192.18.0.0 0.1.255.255</B><BR>
<B>192.18.0.0 0.1.255.255</B><BR>

The bogon list references rfc2455 as mentioning 192.18.0.0/15, however the
subnet is never referenced in it.  In fact, no IP addresses appear to be
in rfc2455, and the network seems to be a perfectly legitimate block
containing two /16's (Sun, Agere) and one /24 more-specific in Sun's /16
block (mrc-apu.cam.ac.uk).

Rob?  An experiment in social engineering? :-)

David.