I just came back from full blown forensics mode. Conclusion: everything OK, this was just caused by multiple levels of (third party) stupid.pic.twitter.com/C2kjhAs2I4
-
Conclusion: the people nominally managing this server (who still use passwords) SFTPed in from the *same* ISP and they fail at CgNAT.
Apparently they're using RFC1918 space for CgNAT (which is stupid, they should use RFC6598) and it leaks into their colo servers sans NAT.
-
-
Remember that all IPv4 address space is routable. RFC 1918 is usually not routed. (127/8 is debatable.)
-
I’d argue for bogon filters on internet interface to ISP’s CGNAT space.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.