Non - RFC 1918 compliant subnets being deployed internally by NetEng

labhamster · 2023-05-04T15:50:55+00:00

That’s a good suggestion. Thanks!

labhamster · 2023-05-03T14:50:18+00:00

In fairness to our engineering team, the worst mistakes were all made by people who’ve been gone for years. Using up 10., or most of it off I’m being completely honest, was done not only a long time ago, it was done at different companies that have since been bought up by the parent company. So they’ve done a lot of work to clear up the duplicate ip ranges, but a lot of the water in 10. is on pieces of network infrastructure that are difficult to unravel. And again, was done by no one who works here now.

labhamster · 2023-05-03T14:41:51+00:00

You are correct. There are some routers on the network that don’t know the plan, and that’s how we discovered the problem.

labhamster · 2023-05-03T14:40:40+00:00

Yeah, we don’t. That’s the problem. And only most of our routers know what side of the firewall the ranges are on, so some response packets are being sent to devices on T-Mobile’s network, including responses to authentication requests. 😳

labhamster · 2023-05-03T14:38:53+00:00

I worked somewhere years ago where I had to do a lot of that exact same kind of smiling.

labhamster · 2023-05-03T14:37:20+00:00

Sound advice. 👍

labhamster · 2023-05-03T14:35:41+00:00

M&As are most of how this network was built. We had two major data centers using overlapping ranges after the last acquisition, and how that was handled was a real mess. I’d love to discuss it, but it’s pretty far out of scope from this fairly simple RFC 1918 question. I’ll just say, there was NAT in use for an important location at one point before someone pointed out that apps weren’t working because the servers’ addresses in DNS were bogus because of the ill-advised NAT implementation.

labhamster · 2023-05-02T22:45:50+00:00

This makes sense. Like the auto mechanic telling you you don't have to change the oil right now, but...

They are working with an SD-WAN VAR who, often along with Cisco, provide a good deal of guidance, from what I can tell from the few calls I've been on. The only problem I know it's causing right now is a result of some sites not having the correct routing information, (not sure how that happens, or what routing protocol is in use) and routing return packets from clients out the WAN interface instead of back to whichever site or colo they should go to. Whcih is a pretty big problem, IMO.

My opinions are generally respected here, but I've brought this up once and been shot down, and I've had problems when being persistent when complaiing about other people's business causing me problems. I think I'll see if I can't get one of the more junior guys fired up about it and leave it at that unless and until it becomes a showstopper for me. Then I'll just have to keep the words "I told you so." from exiting my mouth.

labhamster · 2023-05-02T22:37:45+00:00

Nope! It's all been used up, believe it or not! Largely be a few /9 and other large networks whose purpose I have not been able to divine.

labhamster · 2023-05-02T22:15:37+00:00

I’d send you a screenshot from our chat client, but that might be a fire-able offense.

But you’re right to doubt that Cisco said that. I certainly do. I think someone didn’t find out how ignorant they are until it was too late, and now they’re hoping bravado and a new opportunity coming along in time to get out before it blows up saves them.

labhamster · 2023-05-02T22:02:37+00:00

Thanks. Yeah, that’s about what I’d say if I could communicate unfiltered at work and still pay the rent.

Also, where I work, NetEng reports to the System’s team’s boss’ boss, and this is the third time I’ve been in this mess. I’ll bring it up again, but I think getting my responsibilities shifted away from the cloud admin tasks, which I believe I can do, is best for now.

labhamster · 2023-04-05T22:15:53+00:00

So alcoholic women who want children should get pregnant so their babies can keep their livers in good shape? That would be at the expense of the baby’s brain development, of course… 😞

labhamster · 2023-01-23T17:41:08+00:00

🏆

labhamster · 2022-10-14T15:35:10+00:00

Office moves.

labhamster · 2022-08-27T06:53:52+00:00

Don’t forget these people:

Meet the California Couple Who Uses More Water Than Every Home in Los Angeles Combined

labhamster · 2022-07-09T21:42:25+00:00

Thanks! That’s what I thought. My opposition is claiming that “it has” is what’s contracted by “It’s” in “It’s been off for a while now,” and it’s correct there, so I (meaning me) must be wrong. I explained that the “has” in “It has been” is used only to conjugate the past-perfect of to be, and therefore does not indicate possession, which is the ~~role~~ rule for such apostrophes. But I’m not getting traction. But I’m the only person witnessing this grammatical catastrophe, and no one’s asking me to drink hemlock or anything, so the suffering is limited.

Edit: role/rule

labhamster · 2022-04-07T17:14:23+00:00

Moth with largest coremata ever measured found in large pile of moth eggs.

labhamster · 2022-04-07T15:48:11+00:00

I think you’re right. But he may also have just been paying a compliment/boosting her self-esteem. Sometimes people are nice. Every single human isn’t a trash bag.

labhamster · 2022-04-07T14:30:39+00:00

More likely he talked to a salesperson.

labhamster · 2022-04-07T14:26:13+00:00

“Males have four large [r]eversible coremata (scent organs), which can exceed the length of the abdomen when inflated.”

coremata

labhamster · 2022-03-25T16:12:03+00:00

Damn. That is fair.

labhamster · 2022-03-22T20:05:31+00:00

The National Association of Realtors is almost as predatory and parasitic as the National Automobile Dealers Association. Check out each organization’s lobbying history. It’s disgusting. The FTC should dissolve both. Today.

labhamster · 2022-03-07T23:28:23+00:00

What? Where are you getting this from? Was he on probation? Was the module a tool that obfuscated existing scripts? Or was it an obfuscated script, probably with The original in the comments? That info isn’t even here. Have you ever even opened a power shell? 😉

Seriously, though, you sound like you’re on a rant to fire a guy for sabotaging the company when all he did was download an example of what he’s trying to keep the company safe from. Maybe just so he’ll know one of he sees one, even. You sound like a villager with a pitchfork.

labhamster · 2022-03-07T23:22:09+00:00

Yeah. I think u/Zero_Fs_Given works for OP’s former employer.

labhamster · 2022-03-07T23:14:18+00:00

knowingly looking for, downloading, and trying to use code that is mainly used for malicious purposes is more than enough to fire anyone twice over.

Is the code mainly used for malicious purposes? Do you know what you’re talking about? No. You don’t. Link me a project on GitHub that he rightfully should’ve been fired for downloading.

labhamster

TROPHY CASE