OPT1 needs LAN DNS access
-
@lewis said in OPT1 needs LAN DNS access:
this was left over from when the network was a /16.
Which should of never ever been a thing in the first place ;)
A /16 has no place on an interface anywhere.. It is good for a summary route, its good for a firewall rule, etc. But on an interface - no not really.. In what possible network would you ever possible have 65k devices on the same network ;)
If your putting a /8 or a /16 on some interface - your doing it wrong ;) I could see a /22 or even maybe a /21 maybe.. But /16.. no that is just insane.. Even if your like who cares if its too big, it will bite you later when you want to use some other 192.168 network.. Why would anyone use up all of that rfc1918 space on one network?
Drives me nuts when I see such masks on users setup, or even worse the /8, just like really?? WTF!!! ;)
-
Drives me nuts when I see such masks on users setup, or
even worse the /8, just like really?? WTF!!! ;)Yes, those are very good points.
The reason I have 16's here and there is because I have to bring back to life a lot of used hardware. Quite often, I have no way to know what IP the device is using so I set the network to /16 and scan until I find something.
Problem is that some of these things get left behind as I get busy moving on to the next problems going down non stop rabbit holes.
-
@lewis you understand you could do a arpscan without having actually set the /16 on your device ;)
-
@johnpoz No, I didn't know that an arp scan could do the entire /16 range if the machine it's running on is on a /24. Is that what you're saying? I'll have to look up some info.
-
@lewis yes arpscan can arp for any IPs regardless of what IP or mask is actually set on the interface..
-
@johnpoz Thanks very much. I'll try that right now.
Ack!
arp-scan 192.168.0.0/16
It's very fast but it fails for some reason. I'll look into it.
ERROR: failed to send packet: Resource temporarily unavailable
-
@lewis you more than likely have to be root ;) or suid the command.
Here fun stuff you can do with it, here just scanned the 10.0.0/24 space, but some device might not answer that because see how it shows 192.168.2.12 as the IP asking.
Well you can set the source IP to be the same as the IP you asking for, this can get stuff to answer that will only answer if the source IP is on their network, or you can set it to what you want, etc..
-
Very cool, thanks for sharing. I'll definitely start using this.
Guess I should try to find more time to play with Kali too as it's got all kinds of such things :). -
@lewis so no more setting /16 on interfaces ;)
-
@johnpoz LOl, correct :).
Thanks very much for all of your input. Even if I am not able to commit it all to memory, I have these threads to come back to when I'm stuck.
