[Discuss] 108.0.0.0/8

[Chuck Anderson]

On Fri, Jul 15, 2011 at 04:11:51PM -0400, David Kramer wrote:

> A friend is having trouble accessing my web server but not ping. I
> noticed his IP address which starts with 108.20 in my messages
> log. I use Firestarter, and see 108.0.0.0/8 in
> /etc/firestarter/non-routable. But that range is owned by Verizon
> AFAIK.  Is that the rule that's blocking him?

Yes.

> Should I remove that lune in non-routable?

Yes.

There are no more IPv4 "bogons".  All IPv4 addresses have been
allocated to the regional registries who will soon allocate them to
organizations.  The era of filtering unallocated IPv4 addresses
("bogons") is over.  All that should be in there are RFC1918 and other
special use blocks (unless you are using these locally), e.g.:

/* RFC5735/RFC1122 source hosts on this network */
0.0.0.0/8;
/* RFC5735/RFC1918 private networks */
10.0.0.0/8;
/* RFC5735/RFC1122 loopback */
127.0.0.0/8;
/* RFC5735/RFC3927 link local */
169.254.0.0/16;
/* RFC5735/RFC1918 private networks */
172.16.0.0/12;
/* RFC5735/RFC5736 IETF protocol assignments */
192.0.0.0/24;
/* RFC5735/RFC1166 TEST-NET-1 documentation and examples */
192.0.2.0/24;
/* RFC5735/RFC1918 private networks */
192.168.0.0/16;
/* RFC5735/RFC2544 benchmark tests */
198.18.0.0/15;
/* RFC5735/RFC5737 TEST-NET-2 documentation and examples */
198.51.100.0/24;
/* RFC5735/RFC5737 TEST-NET-3 documentation and examples */
203.0.113.0/24;
/* RFC5735/RFC3171 Class-D multicast */
224.0.0.0/4;
/* RFC5735/RFC1112 Class-E reserved */
240.0.0.0/4;