Are You RFC1918-Compliant? Why Not? | eWeek

Are You RFC1918-Compliant? Why Not?

Written By
eWEEK EDITORS
eWEEK EDITORS
Jun 18, 2001
2 minute read
eWeek content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

Before the proliferation of the internet, most network administrators grabbed a block of addresses for TCP/IP networks out of the air, maybe assigning an entire class C to each division, even if the department had only 10 PCs. Then the Internet explosion changed everything—or at least it should have.

The Internet Engineering Task Force got together and invented “Request for Comment,” which in many cases became the best practicing standard for running a complex network. One of the most important RFCs Ive found is RFC1918, which states that all private networks should use only three specific address blocks inside their firewalls.

Early on, the IETF realized that there were not nearly enough IP addresses available to accommodate every computer, so it recommended that everyone use these addresses inside their networks. Once compliant, users can communicate with computers on the Internet by using Network Address Translation, which associates your inside compliant addresses with a small block of valid external addresses that have been assigned to your organization.

Three years ago, our countys network engineer instructed everyone inside our network to change every computer to (what is today) an RFC1918-compliant IP address. Once compliant, requests to resolve non-RFC1918 addresses were sent to the Internet to be resolved. Before RFC1918, it was a networking nightmare, requiring entering hundreds of static routes and instructing our routers what addresses were to be resolved internally and externally.

These days, many compliant organizations refuse to make an internal connection to a noncompliant network because they know the problems it will cause. Heres an example: Lets say I want to connect to a computer on the non-RFC1918- compliant network that is directly connected to our internal network. Since it looks like a valid Internet address, our routers will automatically send it to the Internet to be resolved, rather than send it to the noncompliant network. Again, the only way to resolve the problem is by entering a static route.

Network gurus look at noncompliant organizations in one of two ways: Either they dont know what theyre doing, or theyre so large there is no single entity powerful enough to correct the problem.

eWeek Logo

eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site's focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.