837
thanks lain (rule) (lemmy.blahaj.zone)
you are viewing a single comment's thread
view the rest of the comments
[-] praise_idleness@sh.itjust.works 88 points 4 months ago

Saying 172.16.0.0/12 is usually for pentesting scummy thing is very misleading...

[-] TechLich@lemmy.world 65 points 4 months ago

It's not that it's on the 172.16.0.0/12 range. That's totally normal and used for all kinds of stuff.

It's that it's in 172.16.42.0/24 which is the default dhcp settings for a wifi pineapple. It's the /24 mask given on the .42 that's a little suspicious because that's not a common range for anything else.

Being assigned one of those specific 253 hosts with that subnet mask would definitely make me think twice.

[-] BigDanishGuy@sh.itjust.works 11 points 4 months ago

It's the /24 mask given on the .42 that's a little suspicious because that's not a common range for anything else.

Well now I know. I operate a ton of /24 subnets in the 172.16.0.0/12 scope. Technically I could fit them in the 192.168.0.0/16 scope, but I have lots of students connecting SoHo wifi-routers to the subnets, and this way it's pretty easy to tell, if someone put the WAN cable in a LAN port when people are getting 192.168.1.0/24 DHCP offers.

[-] user224@lemmy.sdf.org 4 points 4 months ago

but I have lots of students connecting SoHo wifi-routers to the subnets, and this way it’s pretty easy to tell, if someone put the WAN cable in a LAN port when people are getting 192.168.1.0/24 DHCP offers.

I use 172.31.254.0/23 on my WiFi router. I guess I'd confuse you. /23 to just separate it nicely into 2 /24 blocks.
172.31.254.0/24 range is for manual assignments and 172.31.255.0/24 range is given out by DHCP.
I do not need that many IPs, it's just for convenience.

I chose this range because of my school as it uses 192.168.0.0/16 range.
To help mitigate my possible mistakes when connecting to school network, I set the DHCP lease time to just 5 minutes.

[-] Trainguyrom@reddthat.com 3 points 4 months ago* (last edited 4 months ago)

172.31.254.0/24 range is for manual assignments and 172.31.255.0/24 range is given out by DHCP. I do not need that many IPs, it’s just for convenience.

I do similar for my home network, mostly for a combination of future proofing and ease of use.

Realistically it would probably make more sense to segment it with more networks, but I'm only going to go so far with complexity for my home production

could calyx vpn save you from a wifi pineapple?

load more comments (11 replies)
this post was submitted on 06 Jul 2024
837 points (100.0% liked)

196

16419 readers
1921 users here now

Be sure to follow the rule before you head out.

Rule: You must post before you leave.

^other^ ^rules^

founded 1 year ago
MODERATORS