TL;DR: Copy a generated address as a whole token: all four octets and the dots, nothing extra from the page around it. Partial selection and line wraps are how labs get 192.168.1 and a stray word. Paste into a plain text editor first, look once, then move it to the config. Use the generator in a desktop browser when the string has to be exact.
The rule that was missing an octet
A network admin built a deny rule during a maintenance window and copied a sample address from a generator on his phone. The mobile browser had wrapped the line. His long-press selected the first two octets and a piece of the label above them. He proofread poorly because the window was loud, pasted into the firewall, and the parser stored a broken object that the interface later displayed as empty. The rule he thought he had written was not loaded. The rule he had meant to replace stayed. Traffic he intended to drop kept flowing until a colleague read the candidate list aloud and counted dots. Three dots were not there. The copy had never contained them.
Select the token, not the neighborhood
A clean copy is the four fields and the three dots, with no leading label, no trailing space, and no line break in the middle. On a desktop, triple-click sometimes selects a whole line and sometimes selects a paragraph. Prefer click-drag from the first digit through the last digit, or a select-all inside a field that contains only the address. If the page shows several addresses, copy one at a time. A multi-address paste into a single host field is a classic way to create a rule the GUI cannot display.
- Plain text first: paste into Notepad or a code editor and count the dots.
- No label: the word “result” is not an octet.
- No port: do not let a later autofill add :443 unless the field asked for a port.
- One line: if the paste contains a break, delete it and confirm the digits rejoined correctly.
Phones and projectors
Phones are fine for reading an address to a room and poor for copying one into a firewall. If you must copy from a phone, paste into a note, zoom until the line does not wrap, and count four groups before you share the note to a computer. Projectors invite students to photograph the screen and type from the photo. A photo of a wrapped line produces the same missing octet the admin hit, plus occasional confusion between 1 and l if the font is cute. For a class, put the chosen sample in a text file on the class share. For a change window, type from the plain-text paste, not from memory of the phone screen.
Browser “reader modes” and translate features can inject spaces or change punctuation. Turn them off for the copy. Extensions that prettify numbers may insert commas. An IPv4 address with commas is no longer dotted decimal. If your paste suddenly contains commas, a helper “fixed” it. Undo the helper.
Clipboard history
Managers that keep clipboard history will store every address you generate. That is harmless for documentation-range examples and messy if you also copy real customer addresses in the same hour. After a lab, clear the history or accept that yesterday’s sample will be offered as a suggestion inside tomorrow’s production form. Suggestion popups are how a lab address becomes a live deny. Dismiss the popup and paste the value you just verified.
A spoken check
When two people are at the keyboard, one pastes and the other reads the four numbers back from the firewall’s own display, not from the generator tab. The display is what will be enforced. If the firewall canonizes the address — dropping leading zeros, rejecting the paste — believe the rejection and generate a simpler specimen. Do not override a parser because the generator “had it a second ago.” The parser is the system of record. The clipboard is a rumor until the display agrees.
Shared clipboards in remote sessions
A VM console and the laptop often share a clipboard that updates late. You copy from the generator on the laptop, click the VM, and paste the previous contents, which might be a password or an older sample. Click the generator field, copy again, and paste immediately. If the VM shows the wrong specimen, do not “fix” it by typing from memory. The maintenance window’s missing octet and this delayed clipboard are cousins: both deliver a string that is almost what you intended, which is the kind of error a quick glance forgives.
Count the dots before you commit
The maintenance window did not need a smarter generator. It needed a paste that still had three dots when it landed. Desktop browser, plain text, four groups, a second person reading the firewall’s display. Then commit. A sample address is cheap. A rule that silently did not load is the expensive part, and it starts with a finger selecting half a line.
