www.icann.org changed IP address to a reserved block?

Mailman List Mirror (Read Only)
1

I just recently noticed that we cannot get to www.icann.org. Granted, it's been a few weeks since I last tried.

I'm seeing: www.icann.org has address 192.0.34.65, but have been filtering 192.0.0.0/16 le 32 from BGP updates for the longest time.

ARIN shows:
(RESERVED-2) RESERVED-192 192.0.0.0 - 192.0.255.255
ICANN
c/o Internet Assigned Numbers Authority (NET-ICANN) ICANN
                                                     192.0.32.0 - 192.0.47.255

I thought RESERVED meant not in use on the public Internet? I guess in the mean time, I'm gonna drop the 192.0.0.0/16 le 32 filter.

- Dani

2

Um, you really probably only want to filter 192.168.0.0/16...may wanna go
look at rfc 1918 as well...t

3

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You want to be filtering 192.168.0.0/16, as right now you're blocking
not only the icann website, but (among others), but 10 out of 13 of
the root nameservers..

Regards,
Matt

- --
Matt Levine
@Home: matt@deliver3.com
@Work: matt@easynews.com
ICQ : 17080004
PGP : http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x6C0D04CF

- -----Original Message-----

4

10 out of 13 root nameservers, huh?

Granted there are 2 root servers in my named.cache file... but no current root servers
are in 192.0.0.0/16.

$ dig ns .
<snip>
L.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.32.64.12
M.ROOT-SERVERS.NET. 1d15h15m20s IN A 202.12.27.33
I.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.36.148.17
E.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.203.230.10
D.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.8.10.90
A.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.41.0.4
H.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.63.2.53
C.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.33.4.12
G.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.112.36.4
F.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.5.5.241
B.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.9.0.107
J.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.41.0.10
K.ROOT-SERVERS.NET. 1d15h15m20s IN A 193.0.14.129

$ dig ns com.
<snip>
D.GTLD-SERVERS.NET. 15h15m55s IN A 192.31.80.30
L.GTLD-SERVERS.NET. 15h15m55s IN A 192.41.162.30
F.GTLD-SERVERS.NET. 15h15m55s IN A 192.35.51.30
J.GTLD-SERVERS.NET. 15h15m55s IN A 210.132.100.101
K.GTLD-SERVERS.NET. 15h15m55s IN A 213.177.194.5
E.GTLD-SERVERS.NET. 15h15m55s IN A 192.12.94.30
M.GTLD-SERVERS.NET. 15h15m55s IN A 202.153.114.101
A.GTLD-SERVERS.NET. 15h15m55s IN A 192.5.6.30
G.GTLD-SERVERS.NET. 15h15m55s IN A 192.42.93.30
H.GTLD-SERVERS.NET. 15h15m55s IN A 192.54.112.30
C.GTLD-SERVERS.NET. 15h15m55s IN A 192.26.92.30
I.GTLD-SERVERS.NET. 15h15m55s IN A 192.36.144.133

Either way, I'll modify my filters to be a bit more granular in 192.0.0.0/16. Thanks to others for the good pointers.

- Dani