Hi all.
I have a problem where a couple of useful websites (elegantthemes.com and techcrunch.com) which have 192.x IPs are not reachable through my RB2011. Any suggestions how I can allow this?
Thanks
Paul.
192.x.x.x doesn’t mean it’s a private IP range.
Only 192.0.2.0 and 192.168.x.x are “bogus” IP address ranges on the Internet, as far as I’m aware.
If you cannot reach 192.124.249.10 then you need to complain to your ISP.
Do a traceroute and see how far the packets get before dying, and report that to the ISP.
If it gets past your ISP, then you’re going to have to really complain loudly so they’ll escalate it to engineering because it’s going to be your ISP’s ISP’s fault…
Here’s a link with some interesting visibility about the owner of the IP range (Sucuri)
http://bgp.he.net/AS30148
Thanks for the quick reply.
Sorry meant to add that I have two internets on this router; the two biggest ISPs in the UK: BT and Virgin Media. I only use one at a time, not doing any clever load balancing at all. I’ve tried both and the problem persists.
And you should check your netmask. Not setting to like 255.0.0.0.
And we have bingo! I had 255.0.0.0 no idea wtf that came from, thanks both.
Hello!
I have similar problem, but I can’t find where “netmask” is located in router settings.
The only place where I found something similar is in DHCP section, but it accepts integer from - to 32, not xxx.xxx.xxx.xxx format. Can you please advise?
Netmask can appear in two forms, a.b.c.d just like the IP address, or just the number of bits from the most significant one, which is usually appended as /x to the IP address. In both cases it idnicates the same thing, how many initial bits of an IP address to compare to a prefix (in another words, the size of the prefix).
So if you find something like 192.0.0.0/8 in the address field of /ip firewall address list item, or in dst-address field of an /ip route item, that may be a similar case like in the OP, the mask is too short so that record matches to more addresses than intended.