Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 May 2014 14:55:46 -0700
From:      Kurt Buff <kurt.buff@gmail.com>
To:        "Ronald F. Guilmette" <rfg@tristatelogic.com>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Trivia: Puzzling eBay response (IP 10.2.98.245)
Message-ID:  <CADy1Ce6EEU4tRVoqh9RB0BBrtuUBu7=upOUWEQA-SbRbthwZOw@mail.gmail.com>
In-Reply-To: <28274.1400791750@server1.tristatelogic.com>
References:  <CADy1Ce563EdYNeRasoHC-GyuXusNujkrdkdQSXQF6X52trUv0Q@mail.gmail.com> <28274.1400791750@server1.tristatelogic.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, May 22, 2014 at 1:49 PM, Ronald F. Guilmette
<rfg@tristatelogic.com> wrote:
>
> In message <CADy1Ce563EdYNeRasoHC-GyuXusNujkrdkdQSXQF6X52trUv0Q@mail.gmail.com>
> Kurt Buff <kurt.buff@gmail.com> wrote:
>
>>On Thu, May 22, 2014 at 12:57 PM, Ronald F. Guilmette
>>> The password change request was made from:
>>> - IP address: 69.62.255.118
>>> - ISP host: 10.2.98.245
>>> ===========================================================================
>>>
>>> So, I mean, WTF?
>>>
>>> 69.62.255.118 is indeed my correct static IP address, and is indeed the
>>> place from whence I changed my password yesterday.
>>>
>>> I really do wonder where the bleep they got 10.2.98.245 from.
>>>
>>> Obviously, that's an RFC1918 address.
>>>
>>> I do suspect that that IP address has a lot more to do with them, and with
>>> the geography of their own internal network than it has to do with _my_ ISP.
>>
>>Rather than incompetence, I'd first suspect Carrier Grade NAT.
>
> Please elaborate.  What is it, exactly, that you are suggesting actually
> has been assigned the RFC1918 address in question?
>
> Some box on eBay's network?
>
> Some box on my ISPs network?
>
> If the latter, then how exactly does this RFC1918 address end up getting
> routed to eBay?


I expect eBay performed a traceroute to your public address, and that
a box on your ISP's network has the 10.2.98.245 address and emitted it
as the last hop before your public address. That's far from certain,
but it's the first thing I'd think.

Kurt



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CADy1Ce6EEU4tRVoqh9RB0BBrtuUBu7=upOUWEQA-SbRbthwZOw>