Re: Private Address Spaces

From: Don Kelloway (dkelloway_at_commodon.com)
Date: 07/10/03

  • Next message: Don Kelloway: "Re: Private Address Spaces"
    Date: Thu, 10 Jul 2003 15:59:03 GMT
    
    

    "Bernie" <Bernie@weekend.com> wrote in message
    news:errqgvoj4pf4tnqa449nrkkq4q1u7fb66f@4ax.com...
    > On Wed, 9 Jul 2003 23:19:10 -0700, "Kurt L" <kurtl@olypen.com> wrote:
    >
    > >
    > >You can use any IP addresses you want as long as you use them
    PRIVATELY.
    > >That is, no traffic carrying a publicly owned ip address (unless you
    are the
    > >owner) leaves your private network. It's also perfectly acceptable to
    use
    > >public IPs privately if you use NAT to connect to the Internet, so the
    > >inside IPs stay inside. Still, as pointed out, you have a full class A
    > >(10), a Class B (172.16) and 256 class C's (192.168.0 - 192.168.254) -
    OK,
    > >255! With that much private space, why use anything else?
    > >
    > >...kurt
    >
    > As Don pointed out, there are real problems with this. Yes, you "can"
    > use any public IP you want on your private network and use NAT to
    > connect to the public network. It will appear to work 99.999% of the
    > time too. Yes it is I suppose even legal to do so. However, you are
    > stupid to do so because you are going to inevitably cause yourself
    > problems...maybe not today or tomorrow, but possibly the next day.
    >
    > Suppose you are using 20.x.x.x internally. Suppose you go to a
    > website whose DNS resolves to 20.x.x.x. That is, the company that is
    > hosting this is the real owner of the 20.x.x.x pool. From your
    > perspective the webserver is local, and you will never, ever send the
    > packets out to the public network regardless of NAT or anything else.
    > The webserver will just appear to be unreachable, and the same admin
    > that set up the addressing scheme will be just as clueless in solving
    > the "unreachable webserver" problem as he is in proper IP addressing.
    > He will just point the finger at the other company's webserver or
    > email server or whatever and it will never dawn on him that he is
    > causing the problem, not the other company.
    >
    >
    > --Bernie

    Bernie,

    Thanks for the reiteration.

    I'd like to also add what was stated in my original reply and this would
    be that no system within the registered 20.x.x.x range on the 'net will be
    able to send traffic to the LAN where the 'pirated' 20.x.x.x range is
    being used.

    In essence the company using the 'pirated' IP's are effectively preventing
    themselves from being able to send to or receive from 16.5 million IP
    addresses. Not a good thing in my book. <grin>

    -- 
    Best regards,
    Don Kelloway
    Commodon Communications
    Visit http://www.commodon.com to learn about the "Threats to Your Security
    on the Internet".
    

  • Next message: Don Kelloway: "Re: Private Address Spaces"

    Relevant Pages

    • Re: Pirckly City (7-14)
      ... giving it to another private party is "private use". ... owner that was of no value to the new owner. ... > What do you think the Takings Clause was supposed to do, ... > government might need property. ...
      (rec.arts.comics.strips)
    • Re: New 2k3 infrastructure advice
      ... > I've heard of people that put everything on a public network and others who ... > Do you get greater security if you move to a private address space? ... > which can make things more difficult from a security intruder's perspective; ... > requirements from a business perspective. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Private airport insurance?
      ... What is sad is that having a private field SHOULDN'T leave you open to ... now says an owner of a private airport cannot be sued if a pilot crashes ... Washington State did pass a law several years ago that ...
      (rec.aviation.piloting)
    • Re: The most wrong thing I have done...
      ... The owner reports it's noticeably thirstier than the previous V8 M5. ... the big old twin turbo monster and I have a feeling it wasn't 'The Motor Show' but just a motor show heh. ... On our private copy of the A64 you wouldn't beleive what speeds you could get to, especially considering it was meant to be limited to 155. ... I'm pretty sure it allegedly didn't kick in, but couldn't possibly comment on a) the sensibility of our awesome actions, b) the speed on our private track and c) how much absolutely awesome kick ass fun it was:-D We'd left our private land copy of the A64 now though and gone to our longer piece of private land. ...
      (uk.rec.cars.modifications)
    • RE: Heartbeat Adapters in a Windows 2003 cluster.
      ... I currently have the Public and Private interfaces listed under Networks. ... would like to make the Private network redundent by adding an other pair of ... > Recommended private "Heartbeat" configuration on a cluster server ... Heartbeat Adapters in a Windows 2003 cluster. ...
      (microsoft.public.windows.server.clustering)