On 1/16/21 1:13 PM, Jann Traschewski via 44Net wrote:
On 16.01.2021 12:51, Rob PE1CHL via 44Net wrote:
The traffic was not even incoming directly, it
arrived via an IPIP
tunnel (probably DB0FHN) and there is no tunnel route back to that
address.
Croatia (44.170/16) is connected to the HAMNET by VPN tunnel.
Why do they send
traffic for 44.137/16 via that?
From the whois it appears it is BGP connected and I
also see that in the ARIN listing.
They should have sent the traffic directly to
internet, or better get on the IPIP mesh themselves.
Why do they send it via FHN?
Since the IPIP-Mesh routes are pushed to the HAMNET by DB0FHN and your
end is on the IPIP-Mesh, the packets from Croatia are received by VPN
tunnel and forwarded by IPIP-Mesh to your end.
We drop all traffic from the IPIP mesh that does not have a route back to the IPIP mesh.
I hope the new network structure will be deployed "soon" so we no longer have
to
cope with such silly static routings and we can all exchange traffic via a single core
network
without such "man in the middle" forwardings.
Rob