On 1/16/21 1:13 PM, Jann Traschewski via 44Net wrote:
On 16.01.2021 12:51, Rob PE1CHL via 44Net wrote:
The traffic was not even incoming directly, it arrived via an IPIP tunnel (probably DB0FHN) and there is no tunnel route back to that address.
Croatia (44.170/16) is connected to the HAMNET by VPN tunnel.
Why do they send traffic for 44.137/16 via that?
From the whois it appears it is BGP connected and I also see that in the ARIN listing.
They should have sent the traffic directly to internet, or better get on the IPIP mesh themselves. Why do they send it via FHN?
Since the IPIP-Mesh routes are pushed to the HAMNET by DB0FHN and your end is on the IPIP-Mesh, the packets from Croatia are received by VPN tunnel and forwarded by IPIP-Mesh to your end.
We drop all traffic from the IPIP mesh that does not have a route back to the IPIP mesh. I hope the new network structure will be deployed "soon" so we no longer have to cope with such silly static routings and we can all exchange traffic via a single core network without such "man in the middle" forwardings.
Rob