acls with ip ranges

From: Thomas Jarosch <thomas.jarosch@dont-contact.us>
Date: Wed, 12 Jan 2005 16:12:37 +0100

Hi,

I'm facing a little problem using acls which specify IP ranges
on squid-2.5.STABLE7. Have a look at this example:

# NIC eth0 89.0.31.80/255.0.0.0
acl net1 src 89.0.0.0-89.0.21.0
http_access allow net1
acl net2 src 89.0.21.31-89.0.31.0
http_access allow net2

Squid outputs this during startup:
aclParseIpData: WARNING: Netmask masks away part of the specified IP
in '89.0.21.31-89.0.31.0'

89.0.31.0 is a valid IP for the 89.0.31.80/8 network.
I could add a "/32" behind the "89.0.21.31-89.0.31.0",
but I suspect there is a problem (by design?) in the acl parser.

Why does it interpret 89.0.31.0 as network though it's inside an ip range?

I've taken a look at the aclParseIpData() function in acl.c,
what's the additional "%c" at the end of SCAN_ACL2 for?

Please CC: me, I'm not on the list.

Thanks in advance,
Thomas
Received on Wed Jan 12 2005 - 08:24:27 MST

This archive was generated by hypermail pre-2.1.9 : Tue Feb 01 2005 - 12:00:02 MST