Help and Support
Ask a question, report a problem, request a feature...
<<  Back To Forum

IP Filter and 'all zero' addresses

by notaLamer on 2021/10/08 03:34:35 AM    
Tixati 2.84
I admit I only needed this for testing or in other words: 'hey tixati, stop accepting new connections'

If I load the following, Tixati will report empty aka 0 addresses loaded:
0.0.0.0/0
::/0
The current workaround is to manually split all the lower half of addresses:
# 128.b.c.h to 255.b.c.h
128.0.0.0/1
# manual split
64.0.0.0/2
32.0.0.0/3
16.0.0.0/4
8.0.0.0/5
4.0.0.0/6
3.0.0.0/7
2.0.0.0/8
1.0.0.0/8
# the 0.0.0.0/8 subnet will not be included, lacking 16.7M (2^24) addresses
0.0.0.0/8

# same as above
8000::/1
4000::/2
2000::/3
1000::/4
# 0000: - 0fff: range not included
IANA's web pages are split about the meaning of 0.0.0.0/8:
"IANA - Local Identification" https://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xhtml
"This network" as per RFC https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml

Though in case of IPv6 there're some definitions inside the 0::/4 range:
Notes 3, 5, 6. Note 4 was deprecated. https://www.iana.org/assignments/ipv6-address-space/ipv6-address-space.xhtml#note1

Obviously something like 1.0.0.0/0 won't work because Tixati's processor is smart and will round it down to 0.0.0.0/0, as forced by the subnet mask (very cool!)
Finally IP Filter doesn't report anything to the main log about invalid/garbled input like above, just silently does not add "invalid" entries like all zero subnets. (a #line is a comment ok?)

Thank you for sighing at this annoying bug finder of a user!




This web site is powered by Super Simple Server