From owner-freebsd-net@FreeBSD.ORG Thu May 22 21:55:47 2014 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9D5E86C5 for ; Thu, 22 May 2014 21:55:47 +0000 (UTC) Received: from mail-vc0-x22c.google.com (mail-vc0-x22c.google.com [IPv6:2607:f8b0:400c:c03::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5DD9B2FA2 for ; Thu, 22 May 2014 21:55:47 +0000 (UTC) Received: by mail-vc0-f172.google.com with SMTP id ik5so1859866vcb.31 for ; Thu, 22 May 2014 14:55:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=przZPiNSg05W0TjpspOIZ7DSm0hqxzJOU1e9yt+zxv0=; b=KiIQxEi45WRTAi5lrZVLkOk1p+kBqTGJj1Igh8g2TuSnf82lL0pLIDVZxHcCJjoPti ynIKcJFCBpNQqhBZ3llnqUYoTT7HfFOZt+mUEWtFsB8saYOqDvVlLuWnAe6vPzkPgJoP /oz82duylo2QRMGxFIE44dR6o8DOVuyIkKY57N0rf+94B8OvVzypazOivfuB8clsCaT5 dmyRWxr5lIZf47HDnPkDpH3TMa3jI0EJg35jWAxCv996Ew014hoMA6miHPk0iaejRR+z 8ZvFM1Ng5b2hY+QouGNLcVdOswVnAaUUVLFsNmx4hS/cXnk+KfS5ABCkyS9la0pyl7Eu Sy6w== MIME-Version: 1.0 X-Received: by 10.52.72.4 with SMTP id z4mr241928vdu.71.1400795746507; Thu, 22 May 2014 14:55:46 -0700 (PDT) Received: by 10.221.67.136 with HTTP; Thu, 22 May 2014 14:55:46 -0700 (PDT) In-Reply-To: <28274.1400791750@server1.tristatelogic.com> References: <28274.1400791750@server1.tristatelogic.com> Date: Thu, 22 May 2014 14:55:46 -0700 Message-ID: Subject: Re: Trivia: Puzzling eBay response (IP 10.2.98.245) From: Kurt Buff To: "Ronald F. Guilmette" Content-Type: text/plain; charset=UTF-8 Cc: freebsd-net@freebsd.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 May 2014 21:55:47 -0000 On Thu, May 22, 2014 at 1:49 PM, Ronald F. Guilmette wrote: > > In message > Kurt Buff wrote: > >>On Thu, May 22, 2014 at 12:57 PM, Ronald F. Guilmette >>> The password change request was made from: >>> - IP address: 69.62.255.118 >>> - ISP host: 10.2.98.245 >>> =========================================================================== >>> >>> So, I mean, WTF? >>> >>> 69.62.255.118 is indeed my correct static IP address, and is indeed the >>> place from whence I changed my password yesterday. >>> >>> I really do wonder where the bleep they got 10.2.98.245 from. >>> >>> Obviously, that's an RFC1918 address. >>> >>> I do suspect that that IP address has a lot more to do with them, and with >>> the geography of their own internal network than it has to do with _my_ ISP. >> >>Rather than incompetence, I'd first suspect Carrier Grade NAT. > > Please elaborate. What is it, exactly, that you are suggesting actually > has been assigned the RFC1918 address in question? > > Some box on eBay's network? > > Some box on my ISPs network? > > If the latter, then how exactly does this RFC1918 address end up getting > routed to eBay? I expect eBay performed a traceroute to your public address, and that a box on your ISP's network has the 10.2.98.245 address and emitted it as the last hop before your public address. That's far from certain, but it's the first thing I'd think. Kurt