[Solved] Quick Question about Automatic CIDR generation on firewall rules



  • Hi,

    I am trying to create a firewall rule where a certain network can access a port on a local server.

    I assumed to create a firewall rule to a "single host", I would use CIDR: 192.168.1.102/32, meaning 32 bits in the mask.  Yet when I select the drop down for "single host or alias", it auto populates the mask to /31, which yields hosts: 192.168.1.102-103.

    I don't want .103 active, why can't I specify /32?  Is /32 somehow an invalid CIDR?

    Thanks.


  • LAYER 8 Netgate

    Single host just ignore the netmask pulldown and put in the host address. It really should hide instead of switching to /31.



  • Thanks!  That makes sense.

    I should have realized it when it turned grey it was no longer being considered, but it also tries to calculate it then turns it grey which threw me off.


Log in to reply