Cloudflare 1.1.1.1 public DNS broken w/ AT&T CPE

Tue Apr 3 06:22:04 UTC 2018

Hello,

On Mon, 2 Apr 2018 16:26:13 +0100
Marty Strong via NANOG <nanog at nanog.org> wrote:

> So far we know about a few CPEs which answer for 1.1.1.1 themselves:
> 
> - Pace 5268
> - Calix GigaCenter
> - Various Cisco Wifi access points
> 
> If you know of others please send them my way so we can investigate. 

It seems that in France, Orange's Livebox is also using 1.1.1.1 is some
way...

215 [6:20] rol at riri:~> traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 60 byte packets
 1  * * *
 2  * * *
 3  * * *
 4  * * *

216 [6:20] rol at riri:~> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=64 time=0.371 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=64 time=0.292 ms
^C
--- 1.1.1.1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1037ms
rtt min/avg/max/mdev = 0.292/0.331/0.371/0.043 ms

217 [6:20] rol at riri:~> traceroute 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
 1  livebox.home (192.168.1.254)  0.268 ms  0.236 ms  0.263 ms
 2  * * *
 3  ae102-0.ncidf103.Puteaux.francetelecom.net (193.253.80.138)  1.724 ms  1.733 ms  1.793 ms
...

That IP address is definitely full of magic...

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20180403/b4ab4551/attachment.sig>