- Posts: 5
- Thank you received: 0
routable ip
- redduck666
- Offline
- New Member
-
Less
More
18 years 3 weeks ago #20498
by redduck666
that's false, the ips mentioned there ARE routable, but they are NOT globally routable (they can not leave your network), www.rfc-editor.org/rfc/rfc3330.txt documents the special ip ranges, some of which are non-routable.
as for the blocking of non globally routable ips (private ones), i usually do it at firewall level to make sure it doesn't confuse my firewall. not sure if there is some other mechanism implemented that prevents the private ips from leaving the network.
Replied by redduck666 on topic Re: routable ip
That's right. And the non-routable addresses are non-routable because that was the design decision taken when the internet was "invented", see RFC1818: www.rfc-editor.org/rfc/rfc1918.txt . Exactly how the blocking is done I'm not sure - but I'm certain someone out there will shortly tell us...
that's false, the ips mentioned there ARE routable, but they are NOT globally routable (they can not leave your network), www.rfc-editor.org/rfc/rfc3330.txt documents the special ip ranges, some of which are non-routable.
as for the blocking of non globally routable ips (private ones), i usually do it at firewall level to make sure it doesn't confuse my firewall. not sure if there is some other mechanism implemented that prevents the private ips from leaving the network.
18 years 3 weeks ago #20508
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: routable ip
Hi redduck666, if you read Bishops previous post he does state that its non-routable over the Internet.
It is quite common practice to block private addresses on firewalls in order to help guard against spoofing/DoS attacks, when its configured on the egress. This is known as RFC 1918 filtering.
It is quite common practice to block private addresses on firewalls in order to help guard against spoofing/DoS attacks, when its configured on the egress. This is known as RFC 1918 filtering.
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
18 years 3 weeks ago #20517
by TheBishop
Replied by TheBishop on topic Re: routable ip
It kind of comes back to what I was saying; All IP addresses are routable, but not all are permitted to be routed over the internet. And in actual fact the non-routable IP addresses CAN leave your network and be sent out onto the internet - they just won't go anywhere when they do because the internet routers will drop them
- redduck666
- Offline
- New Member
-
Less
More
- Posts: 5
- Thank you received: 0
18 years 3 weeks ago #20523
by redduck666
even 127/8?
Replied by redduck666 on topic Re: routable ip
It kind of comes back to what I was saying; All IP addresses are routable
even 127/8?
18 years 2 weeks ago #20661
by krik
[code:1]R1(config)#interface Loopback 0
R1(config-if)#ip address 127.1.1.1 255.255.255.255
Not a valid host address - 127.1.1.1[/code:1]
So I think we may say 127/8 is not routable
Christophe Lemaire
www.exp-networks.be/blog/
Replied by krik on topic Re: routable ip
Theoretically yes. However you cannot configure IP addresses in this range on Cisco devices.even 127/8?
[code:1]R1(config)#interface Loopback 0
R1(config-if)#ip address 127.1.1.1 255.255.255.255
Not a valid host address - 127.1.1.1[/code:1]
So I think we may say 127/8 is not routable
Christophe Lemaire
www.exp-networks.be/blog/
Time to create page: 0.205 seconds