Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More
Open

Need to exclude CGNAT IPs from "local devices"

I-Firefox Connectivity
john-mark.gurney
john-mark.gurney

The CGNAT (RFC6598, 100.64.0.0/10) address space is currently included as part of the local network. I need to exclude this space from being considered "local", as I need CGNAT to not be blocked, but the standard RFC1918 addresses do need to be blocked.

I have attempted to put just the RFC1918 addresses into network.lna.address_space.private.override, but that didn't have any affect, and putting the CGNAT into the network.lna.address_space.public.override didn't work either. I cannot find documentation on these fields so I have no clue how to use them.

And by put them in, I put in standard CIDR notation, comma delimited, so: 192.168.0.0/16,172.16.0.0/12,10.0.0.0/8.

This problem is encountered with Firefox 157.0.1 (aarch64) under MacOS.

The best solution would be for there to be an option in the standard preferences panel to exclude CGNAT from being considered local, as I think many home users are using the RFC1918, and not the CGNAT space.

Thank you for your help.

The CGNAT (RFC6598, 100.64.0.0/10) address space is currently included as part of the local network. I need to exclude this space from being considered "local", as I need CGNAT to not be blocked, but the standard RFC1918 addresses do need to be blocked. I have attempted to put just the RFC1918 addresses into network.lna.address_space.private.override, but that didn't have any affect, and putting the CGNAT into the network.lna.address_space.public.override didn't work either. I cannot find documentation on these fields so I have no clue how to use them. And by put them in, I put in standard CIDR notation, comma delimited, so: 192.168.0.0/16,172.16.0.0/12,10.0.0.0/8. This problem is encountered with Firefox 157.0.1 (aarch64) under MacOS. The best solution would be for there to be an option in the standard preferences panel to exclude CGNAT from being considered local, as I think many home users are using the RFC1918, and not the CGNAT space. Thank you for your help.

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.