[nsp-sec] "Vietnam Posts and Telecommunications" returned by cymru whois server

Stephen Gill gillsr at cymru.com
Thu Mar 27 21:07:16 EDT 2008


>>> why? it seems kinda useful actually... like in this case it tells us that
>>> someone is announcing publicly a block that they shouldn't be.

The original design was actually set this way on purpose - leave RFC 1918 in
so others can see the leaks which allows for transient issues to appear like
everything else.  I believe we were filtering RFC 1918 in cases where it
didn't appear to be a leak (direct announcements), so I don't necessarily
know if anything needs to change but as Rob said, we'll double check.

-- steve

-- 
Stephen Gill, Chief Scientist, Team Cymru
http://www.cymru.com | +1 312 924 4023 | gillsr at cymru.com





More information about the nsp-security mailing list