I did not see that until all of you who replied to this message told me why
I got the message.
I guess I had to split the network object into several objects:
xxx.4.1.0 255.255.255.0
xxx.4.2.0 255.255.255.0
xxx.4.3.0 255.255.255.0
xxx.4.4.0 255.255.252.0
xxx.4.8.0 255.255.248.0
It would have made things a lot easier if I could have used an address range
in a rule (Source=Address-range). But it seems like that isn't possible, for
some reason I can't understand.
---
J�rn Yngve Dahl-Stamnes
EDB Teamco, Trondheim
[EMAIL PROTECTED]
> -----Original Message-----
> From: Good, Donald [mailto:[EMAIL PROTECTED]]
> Sent: 13. september 2001 18:41
> To: '[EMAIL PROTECTED]';
> [EMAIL PROTECTED]
> Subject: RE: [FW1] IP address overlaps mask.
>
>
> If you look at a network mask in binary, it must always be a
> series of 1's
> (the network part) on the left and the remaining bits on the
> right are 0's
> (the host part). In your example, 255.255.248.0 is
> 11111111.11111111.11111000.00000000
> When you look at the network number (IP address) of the subnet you are
> defining in binary, it can have 1's and 0's where the network
> mask has 1's,
> but where the network mask has 0's, the IP address must also
> all be 0's. In
> your case, xxx.4.1.0 is xxxxxxxx.00000100.00000001.00000000
> and this shows
> that the 1 in xxx.4.1.0 is out of place. You might be
> wanting xxx.4.8.0
> which is xxxxxxxx.00000100.00001000.00000000, but there many other
> possibilities, too.
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 12, 2001 6:24 AM
> To: [EMAIL PROTECTED]
> Subject: [FW1] IP address overlaps mask.
>
>
>
> When trying to define a network in FW-1 4.0, i got a warning:
>
> Warning: IP address overlaps mask.
>
> I can't figure out why. Am I overlooking somthing here. The
> network object
> looks like this:
>
> Name: Some_network
> IP Address: xxx.4.1.0
> Net Mask: 255.255.248.0
>
> ---
> J�rn Yngve Dahl-Stamnes
> EDB Teamco, Trondheim
> [EMAIL PROTECTED]
>
>
> ==============================================================
> ==============
> ====
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==============
> ====
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
