[Dshield] cable modem 10. IPs

Johannes B. Ullrich jullrich at sans.org
Thu Mar 7 20:52:42 GMT 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


 > Yes, ISP's have some interesting routing tricks they do.  For instance, 
 >  at home on my cable modem, all traffic is routed through a 10.0.32.1 
 > IP address.  I've also noticed occasional connection attempts from 
 > similar IPs.

Usually, the external end of your cable modem uses a 10. IP. This IP will
only show up in traceroutes to your cable modem, but not in traceroutes 
from your cable modem. Also, some ISPs use 10. IPs for internal routers. 
Its a good way to conserve IP addresses and make routers a bit more secure 
as you can't address them directly from the outside. Only the routers next 
to it have to be able to send packets to it, and as long as they are owned 
by the same IP it is up to them to define what is 'routable' and what is 
not.
 
- -- 
- -------
jullrich at sans.org                    Join http://www.DShield.org
                          Distributed Intrusion Detection System

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8h9McwWQP+4im9DYRAtF3AJ0fGZhYKTbPg8fZrntrPafL91ByTgCbBplF
h8OVVrziScrHa8oZPeMthyc=
=qmU/
-----END PGP SIGNATURE-----




More information about the list mailing list