NATting a whole country?
Steven M. Bellovin
smb at cs.columbia.edu
Thu Jan 4 00:34:18 UTC 2007
On Thu, 4 Jan 2007 00:53:23 +0100
Iljitsch van Beijnum <iljitsch at muada.com> wrote:
> On 4-jan-2007, at 0:31, Steven M. Bellovin wrote:
>
> > According to
> > http://www.nytimes.com/aponline/technology/AP-TechBit-Wikipedia->
> > Block.html all of Qatar appears on the net as a single IP address.
>
> I wonder what they use the other 241663 addresses for.
>
> +---------+---------+------+--------------+--------+
> | rir | country | type | descr | num |
> +---------+---------+------+--------------+--------+
> | ripencc | QA | ipv4 | 81.29.160.0 | 4096 |
> | ripencc | QA | ipv4 | 82.148.96.0 | 8192 |
> | ripencc | QA | ipv4 | 86.36.0.0 | 131072 |
> | ripencc | QA | ipv4 | 86.62.192.0 | 16384 |
> | ripencc | QA | ipv4 | 89.211.0.0 | 65536 |
> | ripencc | QA | ipv4 | 212.77.192.0 | 8192 |
> | ripencc | QA | ipv4 | 213.130.96.0 | 8192 |
> | ripencc | QA | ipv6 | 2001:1a10:: | 32 |
> +---------+---------+------+--------------+--------+
>
> They have 0.4 addresses per person in Qatar, which isn't all that
> bad: Italy has 0.33. (Caveats about EU labeled address space etc
> apply.)
>
Honeypots?
(As I noted, there might also be a port 80 packet filter, combined with
an official web proxy that can get out.)
--Steve Bellovin, http://www.cs.columbia.edu/~smb
More information about the NANOG
mailing list