[colug-432] fail2ban

William Yang wyang at gcfn.net
Wed May 13 13:20:51 EDT 2015


On 05/12/2015 06:21 PM, Steve VanSlyck wrote:
> The Phantom and documentation says the /8 refers to the mask.
> 
> Is that the same thing?
> 
> If so why the .1/8 in the first whitelisted address instead of .0/8?


ADDRESS/MASK, where MASK is applied to ADDRESS to find the low point of the
range, and then the inverse of MASK is added to the low point to find the
high point of the range.

I'm not aware of any software products that will run into differences in
the actual range described between 127.0.0.1/8 and 127.0.0.0/8.  The
address range is the same -- 127.0.0.0 through 127.255.255.255 -- in both
cases.

	-Bill






> 
> 
> 
> On May 12, 2015 5:44:27 PM EDT, Rick Hornsby <richardjhornsby at gmail.com> wrote:
> 
> 
>         On May 12, 2015, at 16:20, Steve VanSlyck <s.vanslyck at postpro.net>
>         wrote:
> 
>         Aside from whitelisting localhost, does this line also whitelist
>         everything from 209.0.0.0 <http://209.0.0.0> to 209.255.255.255
>         <http://209.255.255.255> inclusive?
>         ignoreip = 127.0.0.1/8 <http://127.0.0.1/8> 209.0.0.0/8
>         <http://209.0.0.0/8>
> 
> 
>     fail2ban aside, yes the CIDR expression 209.0.0.0/8 <http://209.0.0.0/8> refers to the address space in that range.
> 
> 
> 
>     ---------------------------------------------------------------------------
> 
>     colug-432 mailing list
>     colug-432 at colug.net
>     http://lists.colug.net/mailman/listinfo/colug-432
> 
> 
> 
> _______________________________________________
> colug-432 mailing list
> colug-432 at colug.net
> http://lists.colug.net/mailman/listinfo/colug-432
> 


-- 
William Yang
wyang at gcfn.net


More information about the colug-432 mailing list