Re: what comes after firehol?

Paul Fox <[email protected]>
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <[email protected]>
rick wrote:
 > 
 > On 13/06/2011, at 1:03 AM, Paul Fox wrote:
 > 
 > > 
 > > oh -- as for the get-iana.sh thing -- i also have changes (based on
 > > an XML extractor script written in shell) which update get-iana.sh to
 > > use the new IANA file.  the output, after run through "aggregate",
 > > is:
 > >    RESERVED_IPS="0.0.0.0/8 10.0.0.0/8 127.0.0.0/8 224.0.0.0/3"
 > 
 > you have left out 192.168.0.0/16 and 172.16.0.0/12
 > 
 > http://en.wikipedia.org/wiki/Private_network
 > 
 > there's also some in 169.254

i left them out because firehol handles the private blocks separately:
	RESERVED_IPS="0.0.0.0/8 10.0.0.0/8 127.0.0.0/8 224.0.0.0/3"
    ....
	PRIVATE_IPS="10.0.0.0/8 169.254.0.0/16 \
		     172.16.0.0/12 192.0.2.0/24 \
		     192.88.99.0/24 192.168.0.0/16"
     ....
	UNROUTABLE_IPS="${RESERVED_IPS} ${PRIVATE_IPS}"


i'm not sure why the 10.x.x.x range shows up in the IANA reserved
list, and the others don't.

paul
=---------------------
 paul fox, [email protected] (arlington, ma, where it's 51.1 degrees)

------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.