Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Does blocking 192.168.0.0/16 also block addresses on 192.168.1.0/24?

    Scheduled Pinned Locked Moved Firewalling
    5 Posts 2 Posters 546 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      shjfliejfasel
      last edited by

      I was looking at some of the examples people have for blocking the RFC1918 addresses. Does blocking 192.168.0.0/16 also block addresses on 192.168.1.0/24? Wouldn't those be two different networks?

      RonpfSR 1 Reply Last reply Reply Quote 0
      • RonpfSR
        RonpfS @shjfliejfasel
        last edited by

        @shjfliejfasel https://www.calculator.net/ip-subnet-calculator.html

        2.4.5-RELEASE-p1 (amd64)
        Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
        Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

        S 1 Reply Last reply Reply Quote 0
        • S
          shjfliejfasel @RonpfS
          last edited by

          @ronpfs I'm not sure how that helps me. Could you provide some more details about what I am looking at?

          RonpfSR 1 Reply Last reply Reply Quote 0
          • RonpfSR
            RonpfS @shjfliejfasel
            last edited by

            @shjfliejfasel Input your networks and see if they overlap.

            2.4.5-RELEASE-p1 (amd64)
            Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
            Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

            S 1 Reply Last reply Reply Quote 0
            • S
              shjfliejfasel @RonpfS
              last edited by shjfliejfasel

              @ronpfs So are you saying that if the IP ranges overlap, then the firewall will block those IP addresses, regardless of what their "Network Address" is (one has a network address of 192.168.1.0 and one has 192.168.0.0)?

              [Edit] I did some more reading and realized that subnets can overlap and that is an incorrect design. I thought all subnets were unique and couldn't overlap, that is where my confusion was.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.