I just came back from full blown forensics mode. Conclusion: everything OK, this was just caused by multiple levels of (third party) stupid.pic.twitter.com/C2kjhAs2I4
-
I’d argue for bogon filters on internet interface to ISP’s CGNAT space.
Thing is RFC1918 is usually reserved for end-user usage. I happen to have a dangerously close 172.17.0.0/16 net on this server internally.
-
-
Had they picked that for their shitty CGNAT, it wouldn't be able to hit my server (result: their customers can't access, everyone else can!)
-
That's where double NATing comes into play. *SHUDDER*
- Show replies
New conversation -
-
-
Which is exactly why ISPs are STRONGLY encouraged to use 100.64.0.0/10 per RFC 6598. As you wisely pointed out.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
You'd be surprised how many large networks use rfc 1918 space for their control plane
-
I doubt I’d be surprised. I expect a LOT do.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.