Why are Karoo Routing ALL Internet Activity To America?

[xerive]

Hi all,

Do this...

Start / Run

Type CMD

Type:  tracert facebook.com

And you will see something like this:


  1    <1 ms    <1 ms    <1 ms  192.168.0.1
  2    25 ms    36 ms    25 ms  adsl-87-102-92-254.karoo.KCOM.COM [87.102.92.254
]
  3    25 ms    25 ms    25 ms  10.102.241.201
  4    25 ms    25 ms    25 ms  10.102.240.221
  5    28 ms    27 ms    27 ms  10.102.57.6
  6   238 ms   236 ms   226 ms  195.50.119.129
  7    62 ms   214 ms   221 ms  ae-11-11.car1.Manchesteruk1.Level3.net [4.69.133
.97]
  8    34 ms    34 ms    34 ms  ae-4-4.ebr1.London1.Level3.net [4.69.133.102]
  9    36 ms    34 ms    33 ms  ae-100-100.ebr2.London1.Level3.net [4.69.141.166
]
 10   102 ms   102 ms   102 ms  ae-42-42.ebr1.NewYork1.Level3.net [4.69.137.70]

 11   102 ms   102 ms   103 ms  ae-4-4.ebr1.NewYork2.Level3.net [4.69.141.18]
 12   103 ms   103 ms   102 ms  ae-1-100.ebr2.NewYork2.Level3.net [4.69.135.254]

 13   135 ms   126 ms   126 ms  ae-2-2.ebr1.Chicago1.Level3.net [4.69.132.65]
 14   123 ms   123 ms   124 ms  ae-14-53.car4.Chicago1.Level3.net [4.68.101.72]

Trace complete.

C:\Documents and Settings\darren>

C:\Documents and Settings\darren>tracert facebook.com

Tracing route to facebook.com [69.63.189.16]
over a maximum of 30 hops:

  1     1 ms    <1 ms    <1 ms  192.168.0.1
  2    25 ms    25 ms    25 ms  adsl-87-102-92-254.karoo.KCOM.COM [87.102.92.254
]
  3    25 ms    25 ms    25 ms  10.102.241.1
  4    25 ms    25 ms    25 ms  10.102.240.213
  5    31 ms    31 ms    31 ms  10.55.0.213
  6    93 ms    31 ms    30 ms  ldn-s2-rou-1041.UK.eurorings.net [134.222.146.54
]
  7    31 ms    31 ms    31 ms  ldn-s2-rou-1021.UK.eurorings.net [134.222.231.22
5]
  8    39 ms    39 ms    40 ms  obl-rou-1021.NL.eurorings.net [134.222.231.173]

  9    39 ms    39 ms    39 ms  rt2-rou-1022.NL.eurorings.net [134.222.229.130]

 10    39 ms    39 ms    39 ms  195.190.227.222
 11    42 ms    41 ms    41 ms  tengigabitethernet4-3.ar7.AMS2.gblx.net [207.138
.112.129]
 12   113 ms   112 ms   113 ms  po4-20G.ar5.DCA3.gblx.net [67.16.136.237]
 13   116 ms   115 ms   119 ms  FACEBOOK-INC.TenGigabitEthernet2-4.ar5.DCA3.gblx
.net [64.213.54.10]
 14   116 ms   115 ms   114 ms  ae1.bb01.iad1.tfbnw.net [204.15.20.118]
 15   115 ms   115 ms   115 ms  ae1.dr04.ash2.tfbnw.net [74.119.76.186]
 16   115 ms   115 ms   115 ms  eth-18-24.csw01a.ash2.tfbnw.net [74.119.77.171]


From Kcom it goes to 3 through to 5

This is California, Admiralty way - here is the IPwhois info:

OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address: 4676 Admiralty Way, Suite 330
City: Marina del Rey
StateProv: CA
PostalCode: 90292-6695
Country: US

NetRange: 10.0.0.0 - 10.255.255.255
CIDR: 10.0.0.0/8
NetName: RESERVED-10
NetHandle: NET-10-0-0-0-1
Parent:
NetType: IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment: This block is reserved for special purposes.
Comment: Please see RFC 1918 for additional information:
Comment: http://www.arin.net/reference/rfc/rfc1918.txt
RegDate:
Updated: 2007-11-27

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone: +1-310-301-5820 begin_of_the_skype_highlighting              +1-310-301-5820      end_of_the_skype_highlighting begin_of_the_skype_highlighting              +1-310-301-5820      end_of_the_skype_highlighting begin_of_the_skype_highlighting              +1-310-301-5820      end_of_the_skype_highlighting
OrgAbuseEmail: abuse@iana.org


So my question.

Why is Karoo routing ALL traffic via here?

[miken]

The 10.0.0.0/8 range is free for anyone to use on there network, kc just use it for internal routing.

The address's are private to each network they are on, you couldn't access them from outside KC's network.

Its like routers 192.168.0.* internal address's

Edit,

There is a link in your post about it, http://www.arin.net/reference/rfc/rfc1918.txt

3. Private Address Space

   The Internet Assigned Numbers Authority (IANA) has reserved the
   following three blocks of the IP address space for private internets:

     10.0.0.0        -   10.255.255.255  (10/8 prefix)
     172.16.0.0      -   172.31.255.255  (172.16/12 prefix)
     192.168.0.0     -   192.168.255.255 (192.168/16 prefix)

   We will refer to the first block as "24-bit block", the second as
   "20-bit block", and to the third as "16-bit" block. Note that (in
   pre-CIDR notation) the first block is nothing but a single class A
   network number, while the second block is a set of 16 contiguous
   class B network numbers, and third block is a set of 256 contiguous
   class C network numbers.

   An enterprise that decides to use IP addresses out of the address
   space defined in this document can do so without any coordination
   with IANA or an Internet registry. The address space can thus be used
   by many enterprises. Addresses within this private address space will
   only be unique within the enterprise, or the set of enterprises which
   choose to cooperate over this space so they may communicate with each
   other in their own private internet.

[dylan]

I don't think KC are routing all traffic through to the states. Run a traceroute on google.co.uk and you'll see that the traffic stays within the UK. Perhaps your traceroute to facebook.com is just showing you that facebook.com is hosted in the states?

[commandergc]

DNS does seem to be going to the states though. this ip 67.63.55.11 keeps showing up in the OpenDNS updater as a possible DNS proxy. At a guess it may have something to do with the DNS search crap that kc use when you miss spell a domain name

[miken]

I dont use the kc dns,

But KC dns at 213.249.130.100 [cachedns2.core.kcom.com] is a karoo owned ip and according to a whois lookup runs on via AS12390 (KC's network)

assist.kingstoncommunications.com appears to be used as the page karoos dns sends you to if it cant find a record for the domain requested. Which sends you to kcomassist.infospace.com [67.63.50.46] which is the search search thing, provided by some other company so not on KC network.

[kinnison]

We've often had problems at work where I can get on the internet, and no-one else can... and that's because I use specific DNS servers, whereas everyone else uses the standard Karoo ones.