Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Potential regex bug with IPv4 Bogon parsing

    Firewalling
    3
    3
    346
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      skaag last edited by

      We received a complaint from another ISP claiming we were blocking their range. The range in question is 185.149.252.0/22.

      A look at the Firewall logs revealed a surprise: it was being blocked because it was on the list of Bogon networks. I couldn't believe it so I looked at the list of Bogons myself but I couldn't find a CIDR that would match. I'm referring to the list that pfSense updates from, found here:

      https://files.pfsense.org/lists/fullbogons-ipv4.txt

      I had to temporarily disable Bogon filtering in the Rules section, to allow this ISP's customers to reach machines behind our firewall.

      Is this a bug in how pfSense Bogons are parsed? There's a range in there that's close: 185.1.128.0/17
      Is it possible a parsing bug associates the ISP's range with this Bogon network above?

      I didn't want to submit a full bug report before confirming it here first, on the forum.

      Thanks!

      1 Reply Last reply Reply Quote 0
      • johnpoz
        johnpoz LAYER 8 Global Moderator last edited by

        I don't see how that could happen if you go under diag, tables you can look at the bogon table - what is in there?  I don't see this 185.149  - you sure that was his IP he was coming from?  You saw it in the logs for blocked bogons?

        1 Reply Last reply Reply Quote 0
        • jimp
          jimp Rebel Alliance Developer Netgate last edited by

          Your local copy of that file may be out of date. Check Diagnostics > Tables, and pick bogons there. Click the update button to refresh your local copy.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy