Date: Sat, 05 Mar 2022 22:19:52 +0100 From: Steffen Nurpmeso <steffen@sdaoden.eu> To: "Pedro F. Giffuni" <pfg@FreeBSD.org> Cc: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: Re: git: 455e0b9ba5dd - main - /etc/hosts: Wording changes to better match RFC 1918 Message-ID: <20220305211952.hdWAk%steffen@sdaoden.eu> In-Reply-To: <202203052059.225KxqL3098920@gitrepo.freebsd.org> References: <202203052059.225KxqL3098920@gitrepo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Pedro F. Giffuni wrote in <202203052059.225KxqL3098920@gitrepo.freebsd.org>: |The branch main has been updated by pfg: | |URL: https://cgit.FreeBSD.org/src/commit/?id=455e0b9ba5dd44511849af7424c\ |922c5c10cb2bd | |commit 455e0b9ba5dd44511849af7424c922c5c10cb2bd |Author: Pedro F. Giffuni <pfg@FreeBSD.org> |AuthorDate: 2022-02-28 04:07:34 +0000 |Commit: Pedro F. Giffuni <pfg@FreeBSD.org> |CommitDate: 2022-03-05 21:00:59 +0000 | | /etc/hosts: Wording changes to better match RFC 1918 ... |-# According to RFC 1918, you can use the following IP networks for |-# private nets which will never be connected to the Internet: |+# According to RFC 1918, you can use the following IP blocks for |+# private internets: | # |-# 10.0.0.0 - 10.255.255.255 |-# 172.16.0.0 - 172.31.255.255 |-# 192.168.0.0 - 192.168.255.255 |+# 10.0.0.0 - 10.255.255.255 (10/8 prefix) |+# 172.16.0.0 - 172.31.255.255 (172.16/12 prefix) |+# 192.168.0.0 - 192.168.255.255 (192.168/16 prefix) | # |-# In case you want to be able to connect to the Internet, you need |+# In case you want to make addresses available on the Internet, you need | # real official assigned numbers. Do not try to invent your own network | # numbers but instead get one from your network provider (if any) or | # from your regional registry (ARIN, APNIC, LACNIC, RIPE NCC, or AfriNIC.) Let me be stupid one more time, as these IPs are used by public WLANs and i did not use 127.0.0.0/8 (-loopback, stupid me) i started to firewall-block the RFC 5737 TEST-NET-[123] on ingress, and thus have 192.0.2.0/24, 198.51.100.0/24 and 203.0.113.0/24 guaranteed to be bite-free (and routable via VPN). --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20220305211952.hdWAk%steffen>