3 ms·

A purely hypothetical and fictional story: A programmer once complied with a requirement to produce a firewall policy by creating an allowlist policy that was e

A purely hypothetical and fictional story: A programmer once complied with a requirement to produce a firewall policy by creating an allowlist policy that was effectively, 0.0.0.0/0 but with addresses such as the following removed: - 100.64.0.0/10 - 192.0.0.0/24 - 192.88.99.0/24 - 192.0.2.0/24 - 198.51.100.0/24 - 203.0.113.0/24 - 233.252.0.0/24 The significance of these networks is left as a punchline for the reader.

autoexecdotbat 3y ago
https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml https://www.iana.org/assignments/iana-ipv4-special-registry/... What is 233.252.0 0/24 reserved for? I don't immediately recognize it and didn't see it on the iana special registry.
- anotherhue 3y ago
  https://chat.openai.com/share/7f51c5f6-5193-4f7a-9c4b-7c44647cc095 https://chat.openai.com/share/7f51c5f6-5193-4f7a-9c4b-7c4464...
  - dharmab 3y ago
    GPT is wrong here - or at least, doesn't provide the complete picture
- dharmab 3y ago
  https://datatracker.ietf.org/doc/html/rfc5771#section-9.2 https://datatracker.ietf.org/doc/html/rfc5771#section-9.2 > The first /24 in this range, 233.252.0.0/24, is assigned as "MCAST- TEST-NET" for use in documentation and example code. 233.252.0.0/24 SHOULD be used in conjunction with the [RFC2606] domain names example.com or example.net in vendor and protocol documentation. Addresses within 233.252.0.0/24 MUST NOT appear on the public Internet.
  - autoexecdotbat 3y ago
    Well dang I should've thought that through before asking the question. Should've realized up in the 220-230 range was going to be mcast reserved. Can't help but acknowledge the irony in not throughly reading the docs for the documentation reserved range though. https://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml https://www.iana.org/assignments/multicast-addresses/multica...

autoexecdotbat 3y ago

https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml https://www.iana.org/assignments/iana-ipv4-special-registry/... What is 233.252.0 0/24 reserved for? I don't immediately recognize it and didn't see it on the iana special registry.

anotherhue 3y ago
https://chat.openai.com/share/7f51c5f6-5193-4f7a-9c4b-7c44647cc095 https://chat.openai.com/share/7f51c5f6-5193-4f7a-9c4b-7c4464...
- dharmab 3y ago
  GPT is wrong here - or at least, doesn't provide the complete picture
dharmab 3y ago
https://datatracker.ietf.org/doc/html/rfc5771#section-9.2 https://datatracker.ietf.org/doc/html/rfc5771#section-9.2 > The first /24 in this range, 233.252.0.0/24, is assigned as "MCAST- TEST-NET" for use in documentation and example code. 233.252.0.0/24 SHOULD be used in conjunction with the [RFC2606] domain names example.com or example.net in vendor and protocol documentation. Addresses within 233.252.0.0/24 MUST NOT appear on the public Internet.
- autoexecdotbat 3y ago
  Well dang I should've thought that through before asking the question. Should've realized up in the 220-230 range was going to be mcast reserved. Can't help but acknowledge the irony in not throughly reading the docs for the documentation reserved range though. https://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml https://www.iana.org/assignments/multicast-addresses/multica...