On Sat, 24 May 2025 06:35:53 -0400
Greg Troxel <gdt%lexort.com@localhost> wrote:
It would be good if someone(tm) surveyed the N firewalls out there (all,
not just ones that run on NetBSD) to see what the broad practice is
about non-zero host bits. My experience is somewhat limited, but I've
never run into errors or warnings.
As for FreeBSD 13.4's ipfw, it masks on add and echoes it back:
# ipfw add 2345 deny ip from 192.168.64.7/24 to any // tech-net%NetBSD.org@localhost
02345 deny ip from 192.168.64.0/24 to any // tech-net%NetBSD.org@localhost