Re: Proposal to apply mask to IP address set on rule

[mlelstv%serpens.de@localhost (Michael van Elst)]

woods%planix.ca@localhost ("Greg A. Woods") writes:

>Some have suggested they've "seen warnings or rejects" before, but
>nobody has given a concrete reference, except for me [tcpdump, where it
>causes nothing but annoyance and requires extra effort to work around].


Access lists for Squid and Varnish web caches both warn you about
about a bad subnet definition with nonzero host part and tell you
how they "fix" it (by zeroing the host part).

Wireguard warns you about a nozero host part (probably then
ignores it then).

libwwrap (tcpwrappers) warns you about non-zero host bits (and ignores them).


So, at least warnings aren't that rare.