@emotional_soup_88__dup_21417@programming.dev
Post #508235
2026-03-03 19:27 UTC
Thank you very much! :)
Interesting why iptables behaves like that though. Because, if I understand it correctly, specifying any address between 192.168.1.[0…255]/24 will result in all addresses in that range to be accepted? So, the only way to actually single out one host is to use the mask /32…?
Replies (1)
-
@CosmicGiraffe@lemmy.world 2026-03-03 22:01
Yes, exactly. The convention is to use the lowest address in the range (e.g. 192.168.1.0/24), since you’re allowing a range of addresses rather than a single one. The reason to do this is that many firewall rules will be based on sets of addresses - you might want to allow traffic from any device in your local network without having to add individual rules for each