I haven't seen this posted to NZNOG so here you go.
andy
-------- Original Message --------
Subject: Filtering Previously Unallocated Addresses
Date: Fri, 15 Oct 2010 15:44:11 +1100
From: APNIC-NO-REPLY
Reply-To: APNIC-NO-REPLY
To: asjl
_______________________________________________________________________
Filtering Previously Unallocated Addresses
_______________________________________________________________________
APNIC recognizes that as the IANA pool of unallocated IPv4 addresses
nears exhaustion, there may be increasing community concern about the
quality of the new address blocks made available for distribution.
It is important that you ensure your router Access Control Lists (ACLs)
are updated so addresses are not mistakenly filtered through your
routers. It may also be time to consider whether you should stop any
form of BOGON filtering.
This is especially important for newly allocated address blocks:
* 1.0.0.0/8
* 14.0.0.0/8
* 27.0.0.0/8
* 49.0.0.0/8
* 101.0.0.0/8
* 223.0.0.0/8
Keep informed about IANA allocations at:
http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml
For those with recently allocated address space here are several tips
to check whether your IP Addresses are filtered:
* Your own firewall might be blocking the new IP addresses by
default, if you set up your servers to block bogon IP ranges. To
avoid blocking potential new customers, consider whether you
should stop any form of BOGON filtering.
* Run a traceroute to see if the new IP is consistently blocked
along the same network path. It is advisable also, to test
forward and reverse paths. Use of technology like the Routing
Information Service (RIS) is highly recommended to assist in
identifying routing conditions for prefixes under test.
http://www.ripe.net/projects/ris/index.html
* Do a search on your IP address and contact those organizations
that appear to be blocking you. You may be blocked due to
activity of one of your customers.
http://whatismyipaddress.com/blacklist-check
* Use a looking glass service as part of the diagnostic tool, set
to detect network filters.
http://www.ris.ripe.net/cgi-bin/lg/index.cgi
Ongoing testing
---------------
As part of our service commitment to our Members and the wider
community, APNIC is working hard to evaluate the usability of address
space allocated to APNIC before it is distributed.
For further information on Resource Quality Assurance and the testing
results, visit:
http://www.apnic.net/rqa
For further assistance, contact:
helpdesk(a)apnic.net
____________________________________________________________________
APNIC Secretariat secretariat(a)apnic.net
Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100
PO Box 2131 Milton, QLD 4064 Australia Fax: +61 7 3858 3199
Level 1, 33 Park Road, Milton, QLD http://www.apnic.net
_______________________________________________________________________
* Sent by email to save paper. Print only if necessary.
