• toynbee@lemmy.world
    link
    fedilink
    arrow-up
    23
    ·
    4 days ago

    I used to use 1.2.3.4 as my gateway.

    At the time I didn’t understand why this offended … Basically everybody.

        • chronicledmonocle@lemmy.world
          link
          fedilink
          arrow-up
          10
          ·
          3 days ago

          That’s mostly because it violates established standards, but you know that already. Lol.

          Also, if you’re talking to a network engineer, they probably have PTSD dealing with a client that did this with a 1.0.0.0/8 used internally or some shit and now huge swathes of the internet doesn’t work, but somehow it’s “our fault” that they can’t load random web sites.

          • toynbee@lemmy.world
            link
            fedilink
            arrow-up
            5
            ·
            3 days ago

            Fwiw, I now use 10.10.220.0/24. I now know what class A, B and C are. I didn’t then.

            Hopefully that offers you some comfort.

            • Billegh@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              1 day ago

              Thankfully, the internet is now as classless as I am. I don’t miss having to align to those.

            • jj4211@lemmy.world
              link
              fedilink
              arrow-up
              3
              ·
              3 days ago

              Everyone knows you need to be using a network like fd25:c74c:a5e9::/64. So much more fun that way.

                • jj4211@lemmy.world
                  link
                  fedilink
                  arrow-up
                  2
                  ·
                  3 days ago

                  It’s just a ‘proper’ IPv6 private address, the IPv6 equivalent of ‘10.’.

                  I say proper as a private address in ipv6 is supposed to be fd, then 40 random bits, then whatever you want. Nothing stops you from having fd::/64 as your private network though. The thinking was people who got tired of merging networks that happened to choose the same 10.x.x.x scheme and/or vpn connecting to multiple sites similarly with the same private address. So they thought it would be swell if every private network on earth would likely be unique, so they said you ‘must’ randomize 5 bytes of it. Then no renumbering/no conflicting vpn connections.

          • jj4211@lemmy.world
            link
            fedilink
            arrow-up
            3
            ·
            3 days ago

            That’s mostly because it violates established standards, but you know that already. Lol.

            Hey, for all you know he might actually be the proper owner of that subnet…

            I know if by some crazy coincedence I had that in my subnet I’d be using it for fun.

            • chronicledmonocle@lemmy.world
              link
              fedilink
              arrow-up
              4
              ·
              3 days ago

              I recently had a ticket for a university that had a /12 of public IPs. They gave every computer, printer, etc. a public IP on their whole network. Nothing has NAT. It was insane. They could buy an entire other university building with the money they’d make selling some of that address space down to even a /24.

  • TheGingerNut@piefed.blahaj.zone
    link
    fedilink
    English
    arrow-up
    108
    ·
    4 days ago

    10.0.0.0/8 address space with a gateway address that gets randomized every 24 hours. Tomorrow’s address is advertised on a HTTP server local to the network that cannot be externally accessed. For security reasons.

    • BluescreenOfDeath@lemmy.world
      link
      fedilink
      English
      arrow-up
      41
      ·
      4 days ago

      Nothing advertises hostnames, and the DHCP table is dumped and every client gets new address at the same time, too.

      Just make sure the MAC addresses randomize, too, and then you’ve got yourself a proper fucking mess for a hacker to sort out.

        • stoy@lemmy.zip
          link
          fedilink
          English
          arrow-up
          2
          ·
          20 hours ago

          I have never found the number 69 joke/reference funny, just annoying.

          You are very welcome to use that IP adress yourself, but I am going to stick to 10.13.37.42

  • Cort@lemmy.world
    link
    fedilink
    arrow-up
    47
    ·
    edit-2
    4 days ago

    Gateway is .69

    Dhcp is .70 - .254

    Static routes are .68 and below

    I will not be taking any questions

    • MehBlah@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      ·
      4 days ago

      About twenty years ago I was hired in to straighten up a network at a investment place. They were running all static IP addresses and the guy who set it up set the gateway to 69. I laughed and started converting them to dhcp and seriously considered leaving the gateway alone.

      I have to ask a question now. My question is, is that you?

    • Limonene@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      4 days ago

      Gateway has multiple IP addresses, from .1 through .10 . (I used to have multiple OpenWRT servers for different things, but consolidated them all into a single rackmount server.)

  • neidu4@piefed.social
    link
    fedilink
    English
    arrow-up
    34
    ·
    edit-2
    4 days ago

    There’s nothing preventing the gateway from being a DHCP client, just saying…

      • cynar@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        4 days ago

        My guess is that enough people were buying routers and using them as access points. They all tend to be on 192.168.0.1 .254 means you don’t get as bad collisions when that happens. It would cut down on technical support calls.

    • moodoovoodoo@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      4 days ago

      I work for a French company that does this, I don’t know if all French companies do this, but it threw me for a loop for sure.

    • chronicledmonocle@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      4 days ago

      There are reasons to put it at the end. For example, 192.168.1.254/24 can be expanded to /23 and have the same gateway address while you migrate clients that are statically assigned or while waiting on DHCP leases to expire, since /23 is a supernet of /24.

    • xylogx@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 days ago

      A typical ip address scheme is to assign lower blocks to dhcp pools and reserve high ip addresses to servers and network gear. Anything over 250 is typically a switch or a router in this case.

    • purplemonkeymad@programming.dev
      link
      fedilink
      arrow-up
      17
      ·
      4 days ago

      Wait is there an existing unicode to ipv6 method. I assume it would just be the bit values of the emoji in utf8?

      fe80::“hello 🐔” aka fe80::6865:6c6c:6f20:f09f:9094

      I approve of the idea of cursed ipv6 notation.

        • FE80@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          4 days ago

          I’ll be everywhere…wherever you look. Wherever there’s a fight so hungry people can eat, I’ll be there. Wherever there’s a cop beatin’ up a guy, I’ll be there. I’ll be in the way guys yell when they’re mad…I’ll be in the way kids laugh when they’re hungry and they know supper’s ready. And when our folks eat the stuff they raise and live in the houses they build…I’ll be there.

  • signalsayge@infosec.pub
    link
    fedilink
    English
    arrow-up
    17
    ·
    4 days ago

    I love that people forget about 127.0.0.0/8 being the loopback network. Everyone just uses .1 when there are so many to choose from.

    • recursivethinking@lemmy.world
      link
      fedilink
      arrow-up
      5
      ·
      3 days ago

      According ding the the law of minimal keystrokes, there’s actually only 9 to choose from.

      After applying the law of minimal motion, you’re down to even fewer.

      Then you go a step further to just using 127.1 (or your preferred last digit)

    • lawks@aussie.zone
      link
      fedilink
      arrow-up
      6
      ·
      edit-2
      3 days ago

      IPv6: Fuck you, you’re only allowed one, now. Yeah, yeah, I know there are about 340 undecillion addresses in the space, but I know better than you, no one in history has ever needed to bind different services to the same port on the loopback interface, and if they did they were doing it wrong. Oh you made an RFC draft? Well I let the one from 2015 2012 expire, so good luck with your current proposal, pleb.

        • lawks@aussie.zone
          link
          fedilink
          arrow-up
          4
          ·
          edit-2
          4 days ago

          So the onus is on every individual user, to pick a random ULA prefix, bind specific addresses from it to the loopback interface, which is a different procedure for different OSes, probably requires root or elevated privileges, can have hard limits on, document it, etc. Greeeeaaaaaaat design. IPv6 gives out /64 like they’re about to turn bad, but can’t spare a /104? Gimme a break.

          I can dig a hole with a spoon, too, but if someone made it so that no one was allowed to dig holes with shovels unless they build their own (and have permission to build the shovel), when previously everyone was allowed to dig with shovels, I would not think highly of that person’s wisdom.

          Maybe you think G. Huston of APNIC and W. Kumari of Google don’t really know what they’re talking about?

          • chronicledmonocle@lemmy.world
            link
            fedilink
            arrow-up
            3
            ·
            3 days ago

            I don’t bother with ULA addresses on my home network and just use the public /56 I have broken into various /64s for each VLAN I have. In a corporate environment, I might use ULA addresses, but since IPv6 is “everything is public by design” and an Enterprise will have a static IPv6 block, if they did it right, it’s not like it’ll change. And for anything that doesn’t need internet, link-local is a thing.

            IPv6 isn’t perfect, but I find myself liking it more and more as time goes on. Some of it is habits. Some of it is that I tire of dealing with things like CGNAT and SIP.

  • notabot@piefed.social
    link
    fedilink
    English
    arrow-up
    9
    ·
    4 days ago

    Nah, put your gateway in a different subnet, but on the same network segment, and add a static /32 route to it on every client.

    • cheet@infosec.pub
      link
      fedilink
      arrow-up
      2
      ·
      4 days ago

      Is there a specific reason behind this? Never considered it but I could see it being useful since most specific routes win.

      • notabot@piefed.social
        link
        fedilink
        English
        arrow-up
        4
        ·
        4 days ago

        Mostly to make the next sysadmin (or yourself in 6 months) weep. There’s nothing preventing there being multiple IP subnets on a single network segment, but you’d usually handle that with separate VLANs, or at least an interface alias, so the machine saw both subnets. About the only reason I could see for just adding a static route would be if you’re in the middle of reconfiguring your network to a new subnet but you still need the hosts you haven’t updated to be able to route.

        • jj4211@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          3 days ago

          The real nightmare when someone puts two ip addresses on the same host through different interfaces. Now that makes for some confusing troubleshooting and explanations in various applications.

          What really gets me is in about 3/4 networks in the last couple of weeks I’ve been asked to help troubleshoot, the problem has been duplicate IP addresses. I don’t know what is going on with people…

    • chronicledmonocle@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      4 days ago

      That won’t work, unless I’m misunderstanding you. You’d still need a gateway within your subnet to handle inter-subnet routing or an additional address on the gateway network.

      • jj4211@lemmy.world
        link
        fedilink
        arrow-up
        4
        ·
        3 days ago

        It can be made to work, just really really stupid.

        Ultimately the ‘gateway’ is really a mac address, and the IP is just the thing to ARP to get the mac address. And you can do some gnarly things to pull off things like off-subnet gateway addresses.

        You should never ever do it, but you can if you hate yourself enough.

        Becomes easier in IPv6 to do these shenigans too.

        • chronicledmonocle@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          3 days ago

          Technically, sure, but you have to do a ton of fuckery and I have no idea why anybody would do all that work rather than just use an IP in the subnet.

      • notabot@piefed.social
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 days ago

        By adding a host, or /32, route to the gateway you should then be able to use it as the default gateway on your main subnet. I was not being serious when I suggested it, as another comment says, it’s a pretty stupid idea, and there really isn’t any sane usecase for it, except possibly one of those 1am “if it’s stupid but it works it’s still stupid, but it’ll do until morning” type fixes that you shudder to recall years later.

  • Taleya@aussie.zone
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    3 days ago

    I’m the cat

    1 is my pc. 254 is the managed micro switch i use to isolate work stuff. Most things are neatly arranged - eg: 70 is the testbed proxmox, 79 is its idrac, 71-78 are the vms, same with 80 on my production proxmox. DHCP is zoned from 101 to 199, IoT are assigned fixed IPs in similar ranges, etc.

    Modem is 11

  • hansolo@lemmy.today
    link
    fedilink
    arrow-up
    15
    ·
    4 days ago

    My home server is at 192.168.1.230 because that’s what IP was assigned to the machine at the moment I set it up.

    Yep. Love that chaos, ya know?

  • db2@lemmy.world
    link
    fedilink
    arrow-up
    10
    ·
    4 days ago

    Also change the random address daily without announcing it. If the 7th floor wants internet they can damn well work for it. 😆