[SunHELP] netmasks

richard at bonkie.org.uk richard at bonkie.org.uk
Tue Apr 3 02:37:44 CDT 2001


To be honest it sounds to me like a deny any any statement which blocks everything.

The reason I say this is that the only place I've ever seen 0.0.0.0 is when a device is broadcasting without an IP in a dhcp / bootp scenario.

> 
> ----- Original Message -----
> From: "Alan Rubin" <rubin at ezy.net>
> To: <sunhelp at sunhelp.org>
> Sent: Monday, April 02, 2001 23:06
> Subject: [SunHELP] netmasks
> 
> 
> > Is there such a thing as a 0.0.0.0 netmask?  If so, what would be the /
> > notation?
> 
> /0, I guess.  It's not really a legitimate mask/address (which is why you're
> trying to block it, of course), so how it's interpreted is going to be
> application-dependent.
> 
> > I'm transposing firewall rulesets from Gauntlet to IP Filter and the
> > Gauntlet rules have some entries with a network address of 0.0.0.0 and a
> > netmask of 0.0.0.0.
> 
> I'd suggest posting this on the ipfilter list ( ipfilter at coombs.anu.edu.au )
> and see what Darren says - it really depends on how IPF decides to handle it.
> 
> KeS
> 
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp
> 
> 

Richard Worwood
Director

Office:	020 8301 2895
Fax: 	08700 509657
Mobile: 07771 662880
Email: 	richard at jakartasolutions.co.uk

Jakarta Solutions - Making the Complicated Simple
http://www.jakartasolutions.co.uk



More information about the SunHELP mailing list