Re: ipsvd-instruct question
Gerrit Pape <[email protected]>
| Newsgroups | gmane.comp.misc.pape.general |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Jul 20, 2005 at 07:49:56AM -0600, Shad L. Lords wrote: > I'm a developer on a project (SME Server - http://contribs.org), and we use > ipsvd to manage many of our daemons. We really like how powerful it is and > the many features that it has. We are trying to implement some access > control lists for ip ranges and I'm wondering if there is an easy way to > filter on ip addresses that aren't class A, B, C, or specific host. > > As an example one network that I'd like to add has a netmask of > 255.255.252.0. With many programs I can just specify x.x.144.0/22. As far > as I can tell with ipsvd I'm going to have to specify 4 entries: x.x.144., > x.x.145., x.x.146., x.x.147. Yes, correct, except for the trailing dots. > Is this the correct or best way to do it or is there something that I'm > missing somewhere? If this is the only way to filter is there any chance of > adding the ability to add entries of the form x.x.144.0/22 or > x.x.144.0/255.255.252.0? Because ipsvd looks up a limited amount of file names in the directory, and doesn't scan the whole directory on all incoming connections, such files don't work. If you want to have a single configuration for this particular network, something like this could help touch .x.x.144.0:22 for i in 4 5 6 7; do ln -s .x.x.144.0:22 x.x.14$i; done Regards, Gerrit.