From: "Taylor, Grant" <gtaylor@riverviewtech.net>
To: netfilter@lists.netfilter.org
Subject: Re: where list of **reserved address**??? (IP addresses can *drop*)
Date: Wed, 27 Apr 2005 10:35:44 -0500 [thread overview]
Message-ID: <426FB150.2060708@riverviewtech.net> (raw)
In-Reply-To: <1114539542.3856.12.camel@seberino.spawar.navy.mil>
> where list of **reserved address**??? (IP address can *drop*)
>
> I had a list but I keep having to remove IP addresses from
> it....either list keeps changing or my list is crap....
As has been previously stated (in replies to your message) IANA has a list of reserved IP addresses (http://www.iana.org/assignments/ipv4-address-space) which will periodically change. So I wrote a small script (see below) that will lynx --dump the page and run and MD5 sum of it and dump it in to a file. Periodically (when ever I feel like having Cron run it) the script will run and compare the page on the web's MD5 sum to what I knew about. If the MD5 sum is different it will email me and let me know.
Also you should look at RFC 3330 as it has a LOT of information (as do most RFCs) about network addresses that should be allowed to pass.
Grant. . . .
#!/bin/bash
NewMD5Sum=`lynx --dump http://www.iana.org/assignments/ipv4-address-space | md5sum | cut -f1 -d\ `
OldMD5Sum=`md5sum ~gtaylor/docs/ipv4-address-space | cut -f1 -d\ `
if [ ${NewMD5Sum} != ${OldMD5Sum:=null} ]; then
lynx --dump http://www.iana.org/assignments/ipv4-address-space > ~gtaylor/docs/ipv4-address-space
cat ~gtaylor/docs/ipv4-address-space | mail -s "New IPv4 Address Space info from IANA (`ct`)" gtaylor@riverviewtech.net
fi
Note: ct is a small script that I wrote to give me a formated date output and is inconsequential in this matter.
next prev parent reply other threads:[~2005-04-27 15:35 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-04-26 18:19 where list of **reserved address**??? (IP addresses can *drop*) Christian Seberino
2005-04-26 18:21 ` Michael Weinert
2005-04-26 18:29 ` Jason Opperisano
2005-04-27 15:35 ` Taylor, Grant [this message]
2005-04-27 17:33 ` R. DuFresne
2005-04-27 18:18 ` Jason Opperisano
2005-04-27 19:58 ` James Sneeringer
2005-04-27 21:22 ` R. DuFresne
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=426FB150.2060708@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.