Usage of fd00::/8 on the Interwebz - something with filters and uRPF
Jan Boogman
boogman at ip-plus.net
Thu May 30 08:50:17 CEST 2013
This has been fixed now, thanks for the heads up.
Jan
Am 30.05.2013 um 08:27 schrieb Jan Boogman <boogman at ip-plus.net>:
> hmm, this is the ip of our ServiceApp6 SVI interface, which C told us has only local significance, apparently this is not the case.
> Time to renumber then.
>
> Cheers
> Jan
>
> Am 29.05.2013 um 21:59 schrieb Jeroen Massar <jeroen at massar.ch>:
>
>> ...
>> 4 2001:7f8:1::a500:3303:1 (2001:7f8:1::a500:3303:1) 20.755 ms 20.763 ms 20.784 ms
>> 5 fd00:3303::1 (fd00:3303::1) 22.010 ms 21.984 ms 21.986 ms
>> 6 2a02:120c:1051:d010::1 (2a02:120c:1051:d010::1) 17.806 ms 17.889 ms 17.842 ms
>> 7 2a02:120c:1051:d010::1 (2a02:120c:1051:d010::1) 18.720 ms 18.593 ms 18.617 ms
>> ...
>>
>> Hmmmm fd00::/8, that really should never ever be visible on the Internet, being Unique *LOCAL* Addresses.
>> And it does not look like they applied the randomness bit for picking a prefix either.
>> You would also almost think that a /28 is more than enough address space to put a few router loopbacks in.
>>
>> It is apparently time for people to start checking their filters again because it seems that these packets leak into other ASNs too...
>>
>> More generally, do recheck your network for BCP38 compliance, please do apply it and require your peers to do the same!
>>
>> Greets,
>> Jeroen
>
More information about the ipv6-ops
mailing list