Re: ipsvd-instruct question

Gerrit Pape <[email protected]>
Newsgroups gmane.comp.misc.pape.general
Message-ID <[email protected]>
On Wed, Jul 20, 2005 at 07:49:56AM -0600, Shad L. Lords wrote:
> I'm a developer on a project (SME Server - http://contribs.org), and we use
> ipsvd to manage many of our daemons.  We really like how powerful it is and
> the many features that it has.  We are trying to implement some access
> control lists for ip ranges and I'm wondering if there is an easy way to
> filter on ip addresses that aren't class A, B, C, or specific host.
> 
> As an example one network that I'd like to add has a netmask of
> 255.255.252.0.  With many programs I can just specify x.x.144.0/22.  As far
> as I can tell with ipsvd I'm going to have to specify 4 entries: x.x.144.,
> x.x.145., x.x.146., x.x.147.

Yes, correct, except for the trailing dots.

> Is this the correct or best way to do it or is there something that I'm
> missing somewhere?  If this is the only way to filter is there any chance of
> adding the ability to add entries of the form x.x.144.0/22 or
> x.x.144.0/255.255.252.0?

Because ipsvd looks up a limited amount of file names in the directory,
and doesn't scan the whole directory on all incoming connections, such
files don't work.  If you want to have a single configuration for this
particular network, something like this could help

 touch .x.x.144.0:22
 for i in 4 5 6 7; do ln -s .x.x.144.0:22 x.x.14$i; done

Regards, Gerrit.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.