cancel
Showing results for 
Search instead for 
Did you mean: 

Martian IP addresses - PlusNet routes them!?

N/A

Martian IP addresses - PlusNet routes them!?

I was trying to sort out a complicated routing issue on my home networks, involving giving my son the ability to access the Internet without being able to infect my machines ( Sad ) but was getting some weird problems in setting it up.

To cut a long story short: the problem was that the packets from the Class C private subnet ("Martian") addresses I'm using were not being routed between my subnets (that's an issue with my router, not for this forum!), but were being routed out into PlusNet's networks, and around them, instead (that is the issue for this forum!). So, when I was pinging what I thought was a machine elsewhere in the house, instead the ping traces were coming from remote machines on the Internet.

Can anyone tell me why these aren't being dropped at the first PlusNet router, as I understood they ought to? I'm connected via lo0-plusnet.pth-ag3.plus.net at 195.166.128.64.

Examples of addresses being routed are 192.168.255.1 and 192.168.254.2.
8 REPLIES
N/A

Martian IP addresses - PlusNet routes them!?


Tracing route to 192.168.254.2. [192.168.254.2]
over a maximum of 30 hops:

1 1613 ms 3 ms 3 ms 10.10.10.1
2 36 ms 29 ms 26 ms lo0-plusnet.ptn-ag1.plus.net [195.166.128.123]
3 26 ms 29 ms 25 ms ge1-0-0-902.ptn-gw2.plus.net [212.159.1.156]
4 26 ms 24 ms 24 ms gi4-0-22.pth-gw1.plus.net [195.166.129.209]
5 25 ms 24 ms 26 ms nte1.pth-btdial.plus.net [212.159.2.33]
6 26 ms 30 ms 30 ms 192.168.253.1
7 26 ms 30 ms 29 ms 192.168.254.2

Trace complete.


thats really quite odd
Community Veteran
Posts: 4,729
Registered: 04-04-2007

Martian IP addresses - PlusNet routes them!?

These look like addresses on Plus.Net's internal network.

I am not sure why they are routable from customer connections.

Chilly
N/A

Martian IP addresses - PlusNet routes them!?

Quote
These look like addresses on Plus.Net's internal network. I am not sure why they are routable from customer connections


Provided RFC 1918 networks are not routable between ISPs, I don't see that it's an error for PN to have such networks visible to us on its own network. OTOH I wouldn't have necessarily expected it - and I certainly wouldn't expect PN to use such networks for devices that us customers should need to access.

Chris
LiamM
Grafter
Posts: 5,636
Registered: 12-08-2007

Martian IP addresses - PlusNet routes them!?

This has been raised before but I can't seem to find the thread. I'll keep looking, though someone else might remember it also.
holdtight
Grafter
Posts: 1,634
Registered: 15-06-2007

Martian IP addresses - PlusNet routes them!?

I remember something about this too Liam, but i cant find it either
N/A

Martian IP addresses - PlusNet routes them!?

Yep, there was a posting by another customer who was getting returns from an internal PN address. I can't remember the reasons why, and like previous postings I've not been able to find it. If I do, then I'll post the link
N/A

Martian IP addresses - PlusNet routes them!?

wasnt that on a 192.168.0.X address before?

and i dont think PN ever got back to why they do it
N/A

Martian IP addresses - PlusNet routes them!?

PlusNet do this, to allow them to detect viral related traffic.

If a worm tried to spread itself, using an exploit like blaster, they usualy attempt the local networks first.

Thus, detecting traffic to such addresses makes this easier.

The official word was they are routed to NULL interfaces, setup specificly for this detection.