Re: Checking for Bogons

["Peter Müller" <peter.mueller@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1217 bytes --]

Hello Gisle,

thanks for your reply.

> What do you mean by "no announcement for a network" exactly?
> (kind of an alien term to me). 

I meant a BGP announcement, such as this one:

> [root(a)maverick ~]# location lookup 193.0.6.139
> 193.0.6.139:
>   Network                 : 193.0.0.0/21
>   Country                 : Netherlands
>   Autonomous System       : AS3333 - Reseaux IP Europeens Network Coordination Centre (RIPE NCC)        <<<<<

> So no ASN result, means a "Bogon"? 

Yes.

> A command like:
>   location.py list-bogons --family ipv4
> 
> returns for example '1.236.0.0/18'. And
> 'location.py lookup ::ffff:1.236.0.0' returns an ASN:
>   Network                 : 1.236.0.0/24
>   Country                 : Korea, Republic of
>   Autonomous System       : AS38396 - Paju office of Education Gyeonggi Province
> 
> Doesn't look like a "Bogon" to me.
> 
> And trying a 'nmap -sA -p80 1.236.0.0/24', gave me 11 hosts up.
> Seems no router cares about Bogons. 

Indeed, looks like this does not work properly. Bug #12712
(https://bugzilla.ipfire.org/show_bug.cgi?id=12712) has been raised for this.

Sorry to disappoint.

Thanks, and best regards,
Peter Müller