Firewalls use Masks to determine the "scope" of a rule. A mask defines how many bits of the IP address must match exactly.
IP: 192.168.1.10
Mask: 255.255.255.255 (/32)
Matches only this specific computer.
IP: 192.168.1.0
Mask: 255.255.255.0 (/24)
Matches any device starting with 192.168.1.x
Visualize how the firewall automatically handles "Established" traffic.
Define the source and destination details below. Note the new Mask fields, which determine if the rule applies to a specific host (/32) or a whole network (/24).
| Source IP | Src Mask | Dest IP | Dst Mask | Proto | State | Action |
|---|