IRR listing of IANA-reserved, a question..

Wed Sep 4 14:08:00 UTC 2002

John M. Brown wrote:
> 
> In the last 72 hours I've seen over 3GB of data hit a network
> I play with with source IP's of IANA-RESERVED space.

Just out of curiosity, do you know that these are bogus source 
addresses?  Some of the IANA-RESERVED block is actually valid and is 
used by IANA's computers.

My company was blocking all of the IANA-RESERVED space for a while, 
until we discovered that the IANA web server is using an address in that 
space.

Note:
	$dig www.iana.org a

	; <<>> DiG 2.0 <<>> www.iana.org a
	;; ->>HEADER<<- opcode: QUERY , status: NOERROR, id: 6
	;; flags: qr rd ra ; Ques: 1, Ans: 1, Auth: 6, Addit: 6
	;; QUESTIONS:
	;;      www.iana.org, type = A, class = IN

	;; ANSWERS:
	www.iana.org.   68055   A       192.0.34.69
	...

and:
	$whois -h whois.arin.net 192.0.34.69
	IANA RESERVED-192 (NET-192-0-0-0-1)
	                                  192.0.0.0 - 192.0.127.255
	ICANN
	c/o Internet Assigned Numbers Authority ICANN (NET-192-0-32-0-1)
	                                  192.0.32.0 - 192.0.47.255

> Various people have reported seeing IANA-RSERVED get announced
> via BGP at different parts of the net.

Again, bogus addresses or legitimate IANA servers?  Not everything in 
IANA-RESERVED is bogus.

-- David