[pfSense] problems with setting 10.0.0.1/8 on LAN

[Eugen Leitl]

On Sun, Nov 27, 2011 at 04:07:31PM +0100, Eugen Leitl wrote:
> 
> While trying to build VIPs and do 1:1 NAT I accidentally noticed
> that setting LAN to 10.0.0.1/8 (instead of 10.0.0.1/24)
> will make the system unresponsive (this is 2.1-DEVELOPMENT (i386)
> built on Fri Oct 21 12:51:56 EDT 2011). I also have other hosts
> on the 10.0.0.0/24 network -- not sure what mixed network masks
> on the same LAN do. I was not able to ping the WAN interface
> at all.
> 
> I reset the LAN back to 10.0.0.1/24 via an IPMI session, at
> which point the system sprang back.
> 
> I'll try doing the same with a /16 mask, let's see what that
> does.

Behavior is the same with /16, ping gets me "Destination Host Unreachable",
while the pfSense itself has no isssue reaching anything outside.

As soon as I reset the LAN back to 10.0.0.1/24 everything
from the outside instantly works again. Weird.

-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE