Cant hack the gateway if you cant find it!

I shamelessly stole it from the old "don't anthropomorphise Larry Ellison" thing.

Fork Yeah! the Rise and Development of Illumos

Would love a car decal version of this!

Lol you fucking psycho. Love it.

No one. And even funnier? I do this shit professionally

wrowling noises

Technically, sure, but you have to do a ton of fuckery and I have no idea why anybody would do all that work rather than just use an IP in the subnet.

It's just a 'proper' IPv6 private address, the IPv6 equivalent of '10.'.

I say proper as a private address in ipv6 is supposed to be fd, then 40 random bits, then whatever you want. Nothing stops you from having fd::/64 as your private network though. The thinking was people who got tired of merging networks that happened to choose the same 10.x.x.x scheme and/or vpn connecting to multiple sites similarly with the same private address. So they thought it would be swell if every private network on earth would likely be unique, so they said you 'must' randomize 5 bytes of it. Then no renumbering/no conflicting vpn connections.

It'd be like one big DDoS attack without them. Haha!

no, not really. you wouldn't be allowed to disable it then.

Further the audit log that you pretty much always need to consult when something fails for mysterious reasons in case it might be SELinux isn't even readable by the user that got dinged. So I can't even code in a way to check if SELinux was the reason and guide the user, instead I have to provide a diagnostic utility they have to 'sudo' to explain to them, or be vague and say 'check if selinux is somehow involved. So I end up despite doing my damndest to not run with privilege asking users to run something with privilege to check a security mechanism.

fedora preinstalls a tool that warns users if they have tripped up in selinux, and provides dome details

• https://fedoraproject.org/wiki/Docs/Drafts/SELinux/SETroubleShoot/Overview

alerts are shown to the user in desktop notifications, and there's a gui tool with some actions

Bleh, gotchu, I was getting the bit boundary wrong (192.168.0.0/24 > 192.168.0.0/23; NOT 192.168.1.0. that's not how bits work)

Yeah I was just saying saying that it's possible to have one without the other.

I'm sure this is hilarious, but I don't know enough about IPv6 to get it.

/31, looking shady since 3021

According ding the the law of minimal keystrokes, there's actually only 9 to choose from.

After applying the law of minimal motion, you're down to even fewer.

Then you go a step further to just using 127.1 (or your preferred last digit)

By adding a host, or /32, route to the gateway you should then be able to use it as the default gateway on your main subnet. I was not being serious when I suggested it, as another comment says, it's a pretty stupid idea, and there really isn't any sane usecase for it, except possibly one of those 1am "if it's stupid but it works it's still stupid, but it'll do until morning" type fixes that you shudder to recall years later.

I have had to deal with a lot of companies where they did the opposite, acted like 192 was a /8 and did stuff way out of the private range.

The real nightmare when someone puts two ip addresses on the same host through different interfaces. Now that makes for some confusing troubleshooting and explanations in various applications.

What really gets me is in about 3/4 networks in the last couple of weeks I've been asked to help troubleshoot, the problem has been duplicate IP addresses. I don't know what is going on with people...

It can be made to work, just really really stupid.

Ultimately the 'gateway' is really a mac address, and the IP is just the thing to ARP to get the mac address. And you can do some gnarly things to pull off things like off-subnet gateway addresses.

You should never ever do it, but you can if you hate yourself enough.

Becomes easier in IPv6 to do these shenigans too.

I recently had a ticket for a university that had a /12 of public IPs. They gave every computer, printer, etc. a public IP on their whole network. Nothing has NAT. It was insane. They could buy an entire other university building with the money they'd make selling some of that address space down to even a /24.

Everyone knows you need to be using a network like fd25:c74c:a5e9::/64. So much more fun that way.

Depends on the equipment. I prefer cidr because its simpler, and ipv6 uses CIDR. Do you want to spell out a /64 in a netmask format? It would look like this: 255.255.255.255.255.255.255.255.0.0.0.0.0.0.0.0

That’s mostly because it violates established standards, but you know that already. Lol.

Hey, for all you know he might actually be the proper owner of that subnet.....

I know if by some crazy coincedence I had that in my subnet I'd be using it for fun.