http://www.dslreports.com/forum/r18513021 en Sat, 22 Nov 2008 14:47:02 EDT Sat, 22 Nov 2008 14:47:02 EDT http://www.dslreports.com/forum/remark,18525055 rjs1003 : Hmm... though this does sound like a bug, how many LAN IP addresses does the unit claim to allow? I suspect it might be 253 - ie it might only be claimed that it does not support wider subnet masks than 255.255.255.0.

What about 10.0.1.1? Is that inside or outside the firewall's coverage (ie a different class C net.)

Note that although in your network config 10.0.0.255 is I guess a legal address it's inadvisable to assign anything to it, and I'm sure one of the IP RFCs also makes this point, though I can't find it right now, because anything misconfigured on the LAN might use it as a broadcast address and hence target the poor PC with ARP packets etc, and because bugs like this firewall one are quite likely to happen in all sorts of bits of software.

Any particular reason you are using 10.x.y.z net?
Do you actually need more than 255 addresses? Ie could you not simply change your subnet mask to 255.255.255.0, or move to a 192.168.x.y/255.255.255.0 address?

Bob]]> http://www.dslreports.com/forum/remark,18525055 Mon, 18 Jun 2007 04:10:22 EDT http://www.dslreports.com/forum/remark,18513021 DaHiA : Hello,
im using 3Com 3CRWDR101A-75
WAN Connection Type PPPOE

i'm using firewall to block P2P ports for "All" IP
my firewall is covering the range from 10.0.0.1 to 10.0.0.254
i thought this is enough, but i was mistaken

i found out that there is a leak.. 10.0.0.255 is working PERFECT with subnet 255.0.0.0 [not 255.255.255.0]
firewall rules are not applied over that single IP

any idea how to block that IP or get it firewall-covered ?
Thanks in advance]]> http://www.dslreports.com/forum/remark,18513021 Fri, 15 Jun 2007 16:33:21 EDT