• 0 Posts
  • 660 Comments
Joined 3 years ago
cake
Cake day: June 23rd, 2023

help-circle
  • You need to understand subnetting. Allowing 192.168.1.0/24 also allows 192.168.1.135/24 In fact 192.168.1.135/24 shouldn’t be valid syntax at all, but it is easier to accept it and then let subnet math fix the mistake.

    I assume your router is 192.168.1.135 for whatever reason, so as long as your router is contained in the configured iptables allowed network, it’ll work with all of the following networks.

    192.168.1.135/32
    192.168.1.134/31
    192.168.1.132/30
    192.168.1.128/29
    192.168.1.128/28
    192.168.1.128/27
    192.168.1.128/26
    192.168.1.128/25
    192.168.1.0/24
    192.168.0.0/23
    … And 22 even larger networks.

    If you don’t configure a subnet mask for the rule, iptables will accept the IP address you put in as a single host, the /32 is implied. The same behavior would be seen using any kind of network filter, though they may not allow you to specify 192.168.1.135/24, they may require a bit boundary, but mathematically, it’s the same.














  • Nah. Trump will bomb a couple of random Iranian targets, claim that the grand-pumbah of islam was killed and then he’ll declare victory and leave, just like last time. Iran will shoot 1000+ missiles at Israel, Israel will spend $200million of US military AID to blow up 90% of the missiles and the remaining missiles will kill 17 people and then Iran will declare victory. Israel will sortie 2 American f-16’s to blow up some long abandon “nuclear sites,” and then Benjamin will get his propaganda win.

    At the end of the day a few billion dollars will be wasted, and literally nothing of substance will happen.