Link to home
Start Free TrialLog in
Avatar of hrolsons
hrolsonsFlag for United States of America

asked on

Xfinity IP addresses for firewall

I'm trying to configure my server firewall to only accept connections that are coming from an Xfinity user.  I don't have a static IP, but was wondering if Xfinity owned a block, or something like that.

I'm setting this up on a FreeBSD server.
ASKER CERTIFIED SOLUTION
Avatar of Dave Baldwin
Dave Baldwin
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of hrolsons

ASKER

What is the number after the slash represent?
It represents the range of IP addresses.  This site can calculate it for you: http://www.ipaddressguide.com/cidr  69.254.0.0/15 for example represents a range of 131,072 IP addresses.  24.0.0.0/12 is for 1,048,576 IP addresses.
/15 is a CIDR notation of the netmask in base 2.
 dave probvided the link, the IP you reference represents all ips from 69.254.0.0-69.255.255.255

unless your "freebsd firewall" obtains the public ip ratherthan a natted 10.x.x.x from the xfinity router ......

commonly the user will be in a /23 Ip range (512 Ips) based on their location, though those Ips/locations shift periodically.

use whatismyip.com to identify the IP/ip range to which you want to grant access.

Using VPN ipsec, will provide a more staight forward setup. using extern Dynamically updateable DNS providers, your hostname can register the IP you have at the time.