Network and Mask to block all IPs on the Internet

J

Jordan

I have a service to configure where I only need it to accept connections
from a limited list of IP addresses. Unfortunately I have to specify what
to deny first AND what to accept after because just filling in the IP's to
accept does not imply that all other's are denied.

Normally I believe that I could fill in 0.0.0.0 with a mask of 0.0.0.0 which
should mean all IP however this configuration utility will not let me use 0
as the first character in the network IP and it will not let me use 0.0.0.0
as a subnet mask.

What is a list of network and masks i can use to quickly generate a list for
blocking all IP's on the Internet? I know I can use 1.0.0.0, 2.0.0.0,
3.0.0.0 and so on giving all a subnet of 255.0.0.0 however that is going to
take hours to fill in to this utility because of the confirmation dialog
boxes. Is there a way to break this down more?
 
J

Jordan

The method is the same, but unfortunatly, the interface does not allow for
the 0.0.0.0 with a mask of 0.0.0.0 so I have to break it down. The
specifications are the same such as:

1.0.0.0 with subnet of 255.0.0.0 will filter for every 1.x.x.x address. I
can do this 254 times but that will take for ever. I was wondering if I
could do something like [1.0.0.0] with a mask of [128.0.0.0] to block
[1.x.x.x] through [127.x.x.x] in one shot. I want to have as few entries
as possible in my block list, but block the most possible IPs.
 
A

Andrei Ungureanu

just try it and see if it's working

--
Regards,
Andrei Ungureanu
www.eventid.net
Test our new EventReader!
http://www.altairtech.ca/eventreader/default2.asp?ref=au


Jordan said:
The method is the same, but unfortunatly, the interface does not allow for
the 0.0.0.0 with a mask of 0.0.0.0 so I have to break it down. The
specifications are the same such as:

1.0.0.0 with subnet of 255.0.0.0 will filter for every 1.x.x.x address. I
can do this 254 times but that will take for ever. I was wondering if I
could do something like [1.0.0.0] with a mask of [128.0.0.0] to block
[1.x.x.x] through [127.x.x.x] in one shot. I want to have as few entries
as possible in my block list, but block the most possible IPs.


Andrei Ungureanu said:
ask the provider of that "configuration utility" how to specify a network
range or a network ID.

--
Regards,
Andrei Ungureanu
www.eventid.net
Test our new EventReader!
http://www.altairtech.ca/eventreader/default2.asp?ref=au
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top