DocBug: Missing info re: ACL's

[anragab]

DocBug: Missing info re: ACL's

[GoogleCodeExporter]

You are right, in Mongoose last match wins. Docs are updated.
Also note a special case for -ssl_cert and -ports combination, where -ssl_cert 
must
always come first. This is also added to the docs.

Original comment by valenok on 22 May 2009 at 9:11

• Changed state: Fixed

[GoogleCodeExporter]

Is it possible to allow an entire subnet?

For example:

acl -0.0.0.0/0,+192.168.0.0/32,+127.0.0.1

should mean: allow only the local computer, or any computer on the subnet 
192.168.0.0
through 192.168.0.1000 .

or is this incorrect? I'm not sure if the "/" is IP notation or mask notation. 
It's
not clear in the manual when last I looked.

Original comment by [email protected] on 23 May 2009 at 6:41

[GoogleCodeExporter]

Yes it is possible to allow/deny whole subnet. In x.x.x.x/y notation 'y' is a 
mask
notation meaning number of bits designated to a subnet. 0 means whole IP address
range, 32 means one single address (and thus can be omitted).
For example, class C addresses have mask 24, thus 1.2.3.0/24 means addresses 
from
1.2.3.0 to 1.2.3.255, and so on.

Original comment by valenok on 23 May 2009 at 7:22