Help on setting up a new block

Filip Hruska fhr at fhrnet.eu
Wed Mar 20 14:31:16 UTC 2019


I would start with basic stuff first.

Traceroutes to check if/where the packets are being dropped. If the path is clear, then it's probably a HTTP level block, in which case figure out if these companies share the same CDN/web protection solution/hoster. If that's the case, contact them directly. 

Regards,
Filip Hruska

On 20 March 2019 3:02:13 pm GMT+01:00, John Alcock <john at alcock.org> wrote:
>Odd Issues
>
>We recently went through an IP Broker and bought a /18 worth of IP's
>
>I am listing all my information below.  Should be public record.
>
>AS Number/Range 395437
>AS Handle AS395437
>AS Name HIGHLANDTEL
>RPKI Certified Yes
>
>As for the IP Block
>
>Net Range 138.43.128.0 - 138.43.191.255
>CIDR 138.43.128.0/18
>Net Name HCL-73
>Net Handle NET-138-43-128-0-1
>Net Type Direct Allocation
>Parent NET-138-0-0-0-0 (VR-ARIN)
>RPKI Certified Yes
>
>In addition, I believe I got all the information in the IRR.  I am
>unclear
>on this part, but I do know ATT is happy now.  I can pass traffic
>through
>their network.
>
>whois -h whois.bgpmon.net " --roa 395437 138.43.128.0/24"
>
>0 - Valid
>------------------------
>ROA Details
>------------------------
>Origin ASN:       AS395437
>Not valid Before: 2019-02-13 05:00:00
>Not valid After:  2029-02-01 05:00:00  Expires in
>9y318d10h46m2.39999997615814s
>Trust Anchor:     rpki.arin.net
>Prefixes:         138.43.128.0/18 (max length /24)
>
>
>So here is my problem.  There are certain sites I can not get to on the
>new
>ip block.
>
>clover.com - They are a large POS vendor catering to small business
>idrive.com - Online backup
>heart.org - american heart association
>onlineproviderservices.com - Looks like an outsourced group that
>handles
>medicare
>landstar.com - trucking company
>
>I am working on trying to contact the companies above, but I have
>started
>resorting to public shaming on social media.  Not an ideal solution.
>
>My thought, could I be missing something?  Perhaps I need to add a
>specfic
>entry in the IRR or anything?  Just seems like a lot of sites will not
>accept my traffic.
>
>Any experts like to chime in?
>
>John

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190320/a88ca053/attachment.html>


More information about the NANOG mailing list