DaHiA
join:2007-01-21
Virginia Beach, VA
|  10.0.0.255 ?
Hello,
im using 3Com 3CRWDR101A-75
WAN Connection Type PPPOE
i'm using firewall to block P2P ports for "All" IP
my firewall is covering the range from 10.0.0.1 to 10.0.0.254
i thought this is enough, but i was mistaken
i found out that there is a leak.. 10.0.0.255 is working PERFECT with subnet 255.0.0.0 [not 255.255.255.0]
firewall rules are not applied over that single IP
any idea how to block that IP or get it firewall-covered ?
Thanks in advance |
|
rjs1003
join:2002-12-04
united kingd
| Hmm... though this does sound like a bug, how many LAN IP addresses does the unit claim to allow? I suspect it might be 253 - ie it might only be claimed that it does not support wider subnet masks than 255.255.255.0.
What about 10.0.1.1? Is that inside or outside the firewall's coverage (ie a different class C net.)
Note that although in your network config 10.0.0.255 is I guess a legal address it's inadvisable to assign anything to it, and I'm sure one of the IP RFCs also makes this point, though I can't find it right now, because anything misconfigured on the LAN might use it as a broadcast address and hence target the poor PC with ARP packets etc, and because bugs like this firewall one are quite likely to happen in all sorts of bits of software.
Any particular reason you are using 10.x.y.z net?
Do you actually need more than 255 addresses? Ie could you not simply change your subnet mask to 255.255.255.0, or move to a 192.168.x.y/255.255.255.0 address?
Bob |
|
