[as112-ops] [IANA #516549] Blackhole servers

mohammed.el-shakweer at bell.ca mohammed.el-shakweer at bell.ca
Thu Dec 22 22:37:03 UTC 2011


Please note, that these tests are from the internal network of a Bell Enterprise Customer, this is not Bell Internet DNS. This output is coming from the customers internet link in Western Canada (Winnipeg) from the Service provider MTS. Hope that helps


The below traceroutes are done the customers router connecting to the service provider MTS;

RO9WG006#traceroute 193.17.192.194

Type escape sequence to abort.
Tracing the route to 193.17.192.194

  1 64.4.68.77 [AS 15290] 0 msec 0 msec 4 msec
  2 64.4.64.139 [AS 15290] 0 msec 0 msec 0 msec
  3  *  *  *
  4 138.187.159.1 [AS 15290] 132 msec 132 msec 132 msec
  5 138.187.129.157 [AS 15290] 132 msec 136 msec 132 msec
  6 138.187.130.7 [AS 15290] 144 msec 144 msec 144 msec
  7 164.128.33.218 [AS 15290] 136 msec 136 msec 132 msec
  8 193.17.192.134 [AS 15290] 164 msec 132 msec 136 msec
  9 193.200.42.138 [AS 15290] 136 msec 132 msec 136 msec
10  *  *  *
 11  *  *  *
 12  *  *  *
 13  *  *  *
 14  *  *  *
 15  *  *  *
 16  *  *  *
 17  *  *  *
 18  *  *  *
 19  *  *  *
 20  *  *  *
 21  *  *  *
 22  *



RO9WG006#traceroute 192.175.48.1

Type escape sequence to abort.
Tracing the route to 192.175.48.1

  1 64.4.68.77 [AS 15290] 0 msec 0 msec 4 msec
  2 64.4.65.11 [AS 15290] 0 msec 0 msec 0 msec
  3 195.66.225.53 [AS 15290] 116 msec 116 msec 124 msec
  4 213.205.109.25 [AS 15290] 120 msec 116 msec 120 msec
  5  *  *  *
  6  *  *  *
  7  *  *  *
  8  *  *  *
  9  *  *  *
 10  *  *

RO9WG006#traceroute 192.175.48.6

Type escape sequence to abort.
Tracing the route to 192.175.48.6

  1 64.4.68.77 [AS 15290] 0 msec 0 msec 0 msec
  2 64.4.65.11 [AS 15290] 4 msec 0 msec 0 msec
  3 195.66.225.53 [AS 15290] 120 msec 124 msec 124 msec
  4 213.205.109.25 [AS 15290] 116 msec 120 msec 124 msec
  5  *  *
RO9WG006#

RO9WG006#traceroute 192.175.48.42

Type escape sequence to abort.
Tracing the route to 192.175.48.42

  1 64.4.68.77 [AS 15290] 0 msec 0 msec 4 msec
  2 64.4.65.11 [AS 15290] 0 msec 0 msec 4 msec
  3 195.66.225.53 [AS 15290] 124 msec 124 msec 124 msec
  4 213.205.109.25 [AS 15290] 124 msec 120 msec 124 msec

Best Regards

[cid:image001.gif at 01CCC0CE.0923F850]
Mohammed El-Shakweer
Network Specialist
Data Network Services & Support (DNSS)
Bell Canada
200 Bouchard Blvd., 6CS
Dorval, Québec, Canada
Tel: (514) 828-9384
mohammed.el-shakweer at bell.ca<mailto:mohammed.el-shakweer at bell.ca>
www.bell.ca<http://www.bell.ca>

Confidentiality warning<http://www.bell.ca/enterprise/EntGnl_EmailConfidentialityWarning.page?language=en>

From: Clement Cavadore [mailto:clement at cavadore.net]
Sent: December-22-11 5:16 PM
To: El-Shakweer, Mohammed (6038808); William F. Maton Sotomayor
Cc: as112-ops at lists.dns-oarc.net
Subject: Re: [as112-ops] [IANA #516549] Blackhole servers

Wow, I couldn't imagine that your network could prefer a server behind my net. Could you provide a show ip bgp or a traceroute ?

I will have a look later on the node at the period you mentioned, and let you know if I see something.

Regards,

Clement Cavadore (hivane)
--
Sent from my phone.
Please excuse my brevity or typos. But not both...
"mohammed.el-shakweer at bell.ca" <mohammed.el-shakweer at bell.ca> wrote:

Hello William & Joe;

Thanks for your feedback, the output of the command is as below;


Infoblox > dig @prisoner.iana.org hostname.as112.net<http://hostname.as112.net> txt +short
"Hivane Networks"
"Paris, FR"
"Unicast IP: 193.17.192.194<http://193.17.192.194>"
"See http://as112.net/ for more information."
"See http://noc.hivane.net/cgi-bin/dsc-grapher.pl for local information."


Best Regards


Mohammed El-Shakweer
Network Specialist
Data Network Services & Support (DNSS)
Bell Canada
200 Bouchard Blvd., 6CS
Dorval, Québec, Canada
Tel: (514) 828-9384
mohammed.el-shakweer at bell.ca
www.bell.ca<http://www.bell.ca>

Confidentiality

warning


-----Original Message-----
From: William F. Maton Sotomayor [mailto:wmaton at ottix.net]
Sent: December-22-11 4:44 PM
To: El-Shakweer, Mohammed (6038808)
Cc: as112-ops at lists.dns-oarc.net
Subject: Re: [as112-ops] [IANA #516549] Blackhole servers


So as Joe very well deomonstrated, from where you are getting those
traces, we need to know exactly which AS112 server is the one your network
is prefering.  What does the output of:

        dig @prisoner.iana.org hostname.as112.net<http://hostname.as112.net> txt +short

Give you as a result from where you are getting hte traces?

On Thu, 22 Dec 2011, mohammed.el-shakweer at bell.ca wrote:

> Hello Anand;
>
> Thanks for your response, below is a trace we were seeing, the first blackhole server not responding, and then the 2nd one responding as below;
>
> No.     Time        Source

       Destination           Protocol Length Info
>   2186 10.757689   10.130.72.21<http://10.130.72.21>          10.130.201.18<http://10.130.201.18>         DNS      96     Standard query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>   2188 10.758043   10.130.201.18<http://10.130.201.18>         192.175.48.6<http://192.175.48.6>          DNS      96     Standard query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>    >>>>>>>>>>>>>blackhole-1.iana.org<http://blackhole-1.iana.org>>>>>no response
>   2454 12.793212   10.130.72.21<http://10.130.72.21>          10.130.201.18<http://10.130.201.18>         DNS      96     Standard query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>   2831 14.793076   10.130.72.21<http://10.130.72.21>          10.130.201.18<http://10.130.201.18>         DNS      96     Standard query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>   3569 16.793252   10.130.72.21<http://10.130.72.21>          10.130.201.18<http://10.130.201.18>         DNS      85     Standard query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>   4314 19.993019   10.130.72.21<http://10.130.72.21>          10.130.201.18<http://10.130.201.18>         DNS      85     Standard query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>   4414 20.758160   10.130.201.18<http://10.130.201.18>         192.175.48.42<http://192.175.48.42>         DNS      96     Standard query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>   4430 20.812626

192.175.48.42<http://192.175.48.42>         10.130.201.18<http://10.130.201.18>         DNS      173    Standard query response, No such name arpa    >>>>>>>>>>>>>blackhole-2.iana.org<http://blackhole-2.iana.org>>>>> response
>
>
>
>
> Best Regards
>
>
> Mohammed El-Shakweer
> Network Specialist
> Data Network Services & Support (DNSS)
> Bell Canada
> 200 Bouchard Blvd., 6CS
> Dorval, Québec, Canada
> Tel: (514) 828-9384
> mohammed.el-shakweer at bell.ca
> www.bell.ca<http://www.bell.ca>
>
> Confidentiality warning
>
> -----Original Message-----
> From: Anand Buddhdev [mailto:anandb at ripe.net]
> Sent: December-22-11 6:59 AM
> To: El-Shakweer, Mohammed (6038808)
> Cc:

iana-questions at iana.org; as112-ops at lists.dns-oarc.net
> Subject: Re: [as112-ops] [IANA #516549] Blackhole servers
>
> On 21/12/2011 23:09, mohammed.el-shakweer at bell.ca wrote:
>
>> Hello AS112-ops;
>>
>> Regarding the blackhole servers, were there any issues in the past
>> 10 days with these servers, as we were having problems getting responses
>> for 172.16.0.0<http://172.16.0.0> - 172.31.255.255<http://172.31.255.255> private addressing space, sometimes no
>> response or slow response. We realize that we should use an internal
>> blackhole or configure the reverse zones for private addressing internal
>> to avoid slow response from blackhole servers on the internet, which we
>> plan to do soon, but if you can shed some light if there were any issues
>> in the past 10 days that would be highly appreciated.
>
> I believe ISC was testing BIND 10 on their AS112 instance. If you
> happened to see prefixes from them, then you may have had trouble
> getting responses for your queries.
>
> Regards,
>
> Anand Buddhdev
> RIPE NCC
>

________________________________

> as112-ops mailing list
> as112-ops at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/as112-ops
>

wfms

________________________________

as112-ops mailing list
as112-ops at lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/as112-ops
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/as112-ops/attachments/20111222/55a3a2e3/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 1851 bytes
Desc: image001.gif
URL: <http://lists.dns-oarc.net/pipermail/as112-ops/attachments/20111222/55a3a2e3/attachment-0001.gif>


More information about the as112-ops mailing list