Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://chaos.social/@goetz" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>goetz</span></a></span> <span class="h-card" translate="no"><a href="https://chaos.social/@fluepke" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>fluepke</span></a></span> AFAICT, all <a href="https://infosec.space/tags/MNOs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MNOs</span></a> and <a href="https://infosec.space/tags/MVNOs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MVNOs</span></a> in <a href="https://infosec.space/tags/Germany" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Germany</span></a> violate <a href="https://infosec.space/tags/RFC6598" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RFC6598</span></a> by using <a href="https://infosec.space/tags/RFC1918" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RFC1918</span></a> address space ( 10.0.0.0/8) bricking <a href="https://infosec.space/tags/VPNs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>VPNs</span></a> that use the same address range instead of using the <a href="https://infosec.space/tags/CGNAT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CGNAT</span></a> address space ( 100.64.0.0/10 ).</p><p>Sadly, <span class="h-card" translate="no"><a href="https://social.bund.de/@BNetzA" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>BNetzA</span></a></span> doesn't really care to enforce anything...</p><p><a href="https://en.wikipedia.org/wiki/Carrier-grade_NAT" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">en.wikipedia.org/wiki/Carrier-</span><span class="invisible">grade_NAT</span></a><br><a href="https://en.wikipedia.org/wiki/IPv4_shared_address_space" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">en.wikipedia.org/wiki/IPv4_sha</span><span class="invisible">red_address_space</span></a><br><a href="https://en.wikipedia.org/wiki/Network_address_translation" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">en.wikipedia.org/wiki/Network_</span><span class="invisible">address_translation</span></a><br><a href="https://datatracker.ietf.org/doc/html/rfc1918" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">datatracker.ietf.org/doc/html/</span><span class="invisible">rfc1918</span></a><br><a href="https://datatracker.ietf.org/doc/html/rfc6598" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">datatracker.ietf.org/doc/html/</span><span class="invisible">rfc6598</span></a></p>