Re: Possibly dangerous interpretation of address/prefix pair in -s option

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Agreed as a user that netmask == more specific filtering. No netmask == use the /32 host as presented.



> On Jun 9, 2022, at 12:11 PM, Reindl Harald <h.reindl@xxxxxxxxxxxxx> wrote:
> 
> 
> 
>> Am 09.06.22 um 19:52 schrieb Chris Hall:
>> I am hoping that it is agreed that it is a mistake for the parser to silently accept unspecified input
> 
> it is *not* unspecified input
> 
> with /24 you *clearly* say "only use the first 3 octets of the address"
> 
> when you use a netmask you are supposed to know what it does and if not just don't specify it - the address alone would have had the assumed result
> 
> it's dead simple and there is nothing to agree




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux