Public address space

[mrbusy]

I recently joined a company with a very badly configured network infrastructure - particularly in the area of security, DNS, DHCP and address space.

At the moment we're using a mass of ranges which cross networks owned by INTEL, EDS and the US gov as the "network admin" has assinged entire class B size networks to remote sites.

Appart from the obvious non-conformity to the best practices laid down in RFC1918 can anyone think of a list of good reasons why we shouldn't have our network configured this way?

I'm trying to build a case to change to proper public spaces before our network gets any bigger and more complex.

Any thoughts would be greatfully received.

 

[LawnBoy]

I don't see how that setup could be functioning...

Firstly, you should have some documentation stating what address ranges have been assigned to the company.

Secondly, it is insane to have an entire worksite facing the internet. Every machine is directly susceptible to every piece of malware floating on the internet. You should be using NAT as a layer of security.

If you assign an address that Intel is using, who gets the traffic, you or Intel? I suspect that there is more going on here than you are aware of. For instance, if you are NATing, it doesn't matter what IP space your network is using, the NAT is going to change it before the traffic hits the internet.

My guess is that you are NATing somewhere.

 

[mrbusy]

Sorry, did forget to mention that we're NATing.

 

[LawnBoy]

I would approach this issue by reminding mgmt. that best practices are declared for a reason. If you are following best practices your chances of adapting to unforeseen situations painlessly are dramatically increased. Situations such as a takeover where you now need to incorporate another network, etc.


"We must fall back upon the old axiom that when all other contingencies fail, whatever remains, however improbable, must be the truth." - Sherlock Holmes

 

[LawnBoy]

Oh, and you want to change to proper private space...


"We must fall back upon the old axiom that when all other contingencies fail, whatever remains, however improbable, must be the truth." - Sherlock Holmes