-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pascal Hambourg wrote: > Le 26/12/2017 à 12:33, Dan Purgert a écrit : >> [...] >> Sounds like perhaps the airstation is blocking client devices from >> talking to "bogus" network addresses. This is generally a feature of >> consumer gear to stop you from trying to ask the internet for >> information about a RFC1918 address (as they are private / not routable >> on the internet). > > What do you mean by "ask the internet for information about a RFC1918 > address" ? Sending an IP packet is not asking the internet for any > information.
No, but if you don't know how to get somewhere (e.g. 192.168.1.0/24 from 192.168.11.0/24), you "ask" your gateway for assistance in getting the packet to its intended destination. Now, since RFC1918 space is not routable on the internet, and consumer gear is meant to be "easy", some assumptions are made - such that "no, they'll never want to use this to talk to an upstream RFC1918 network, so we can safely block it and keep them from asking ISP gateways for networks that don't actually exist". This doesn't cause any problems in the setup for "getting to the internet" since the destination IP address is not RFC1918. > [...] >> No, the airstation having been given an address 192.168.1.x/24 will know >> that it can directly reach any host 192.168.1.1 through 192.168.1.254 >> inclusive. > > Maybe I missed something but I read no evidence in the OP's posts that > the netmask on the Airstation WAN side is actually /24. If for instance > the mask was set to /30 instead, 192.168.1.3 would be considered by the > Airstation as a broadcast address and would explain why it does not work. That could also be possible, but I made the assumption that it was the "default(tm)" subnet from a generic residential gateway device. Also, since he can apparently ssh into the rpi from whatever the firewall device is, it is not likely to be a broadcast address. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJaQmGlAAoJEI4R3fMSeaKBdlQH/jQBLzNvC2DQI7psM8c0Gz7T uVpnxlkrpB5+A18iVwpevzlosswsE/5QwaBF5MTFWWBZ5l27f2q2qIs2r8qiwAZ6 poIT6cNa8FrP6Vk7N5K0E5/b3hYCtsv4f3YiReS6z5t7dWWJhsDRmXrb59InHS08 SJZDuV6/4d+8wUOzPpCLoLRVWDn3IhR9rljFcoVOLfHVs28PxdeHiH38YQw/D/b2 6yIy0OqRJZjP0QI+SV09liTJEKIoL9Lo57mmSmM7KnCciSRpgFZChb3wTQ1ajavq ANQQ4bRFRNltHiUC69J4iuO2r3Ojw4azmOcRL6pNsOkEaQIeorm25e+xPtI/W/Q= =fsYJ -----END PGP SIGNATURE----- -- |_|O|_| Registered Linux user #585947 |_|_|O| Github: https://github.com/dpurgert |O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5 4AEE 8E11 DDF3 1279 A281
