Help on setting up a new block
Filip Hruska
fhr at fhrnet.eu
Wed Mar 20 14:31:16 UTC 2019
I would start with basic stuff first.
Traceroutes to check if/where the packets are being dropped. If the path is clear, then it's probably a HTTP level block, in which case figure out if these companies share the same CDN/web protection solution/hoster. If that's the case, contact them directly.
Regards,
Filip Hruska
On 20 March 2019 3:02:13 pm GMT+01:00, John Alcock <john at alcock.org> wrote:
>Odd Issues
>
>We recently went through an IP Broker and bought a /18 worth of IP's
>
>I am listing all my information below. Should be public record.
>
>AS Number/Range 395437
>AS Handle AS395437
>AS Name HIGHLANDTEL
>RPKI Certified Yes
>
>As for the IP Block
>
>Net Range 138.43.128.0 - 138.43.191.255
>CIDR 138.43.128.0/18
>Net Name HCL-73
>Net Handle NET-138-43-128-0-1
>Net Type Direct Allocation
>Parent NET-138-0-0-0-0 (VR-ARIN)
>RPKI Certified Yes
>
>In addition, I believe I got all the information in the IRR. I am
>unclear
>on this part, but I do know ATT is happy now. I can pass traffic
>through
>their network.
>
>whois -h whois.bgpmon.net " --roa 395437 138.43.128.0/24"
>
>0 - Valid
>------------------------
>ROA Details
>------------------------
>Origin ASN: AS395437
>Not valid Before: 2019-02-13 05:00:00
>Not valid After: 2029-02-01 05:00:00 Expires in
>9y318d10h46m2.39999997615814s
>Trust Anchor: rpki.arin.net
>Prefixes: 138.43.128.0/18 (max length /24)
>
>
>So here is my problem. There are certain sites I can not get to on the
>new
>ip block.
>
>clover.com - They are a large POS vendor catering to small business
>idrive.com - Online backup
>heart.org - american heart association
>onlineproviderservices.com - Looks like an outsourced group that
>handles
>medicare
>landstar.com - trucking company
>
>I am working on trying to contact the companies above, but I have
>started
>resorting to public shaming on social media. Not an ideal solution.
>
>My thought, could I be missing something? Perhaps I need to add a
>specfic
>entry in the IRR or anything? Just seems like a lot of sites will not
>accept my traffic.
>
>Any experts like to chime in?
>
>John
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190320/a88ca053/attachment.html>
More information about the NANOG
mailing list