Commit 61ca7d59 authored by David Dykstra's avatar David Dykstra

Update description of hosts allow for IPv6. From Bert Vermeulen.

parent 688d5732
...@@ -256,19 +256,18 @@ connection is rejected. ...@@ -256,19 +256,18 @@ connection is rejected.
Each pattern can be in one of five forms: Each pattern can be in one of five forms:
itemize( itemize(
it() a dotted decimal IP address of the form a.b.c.d for IPv4 and it() a dotted decimal IPv4 address of the form a.b.c.d, or an IPv6 address
a.b.c.d.e.f for IPv6. In this case the incoming machine's IP address of the form a:b:c::d:e:f. In this case the incoming machine's IP address
must match exactly. must match exactly.
it() a address/mask in the form ipaddr/n where ipaddr is the IP it() an address/mask in the form ipaddr/n where ipaddr is the IP address
address in dotted decimal notation and n is the number of one bits in and n is the number of one bits in the netmask. All IP addresses which
the netmask. All IP addresses which match the masked IP address will match the masked IP address will be allowed in.
be allowed in.
it() a address/mask in the form ipaddr/maskaddr where ipaddr is the it() an address/mask in the form ipaddr/maskaddr where ipaddr is the
IP address in dotted decimal notation and maskaddr is the netmask in IP address and maskaddr is the netmask in dotted decimal notation for IPv4,
dotted decimal notation. All IP addresses which match the masked IP or similar for IPv6, e.g. ffff:ffff:ffff:ffff:: instead of /64. All IP
address will be allowed in. addresses which match the masked IP address will be allowed in.
it() a hostname. The hostname as determined by a reverse lookup will it() a hostname. The hostname as determined by a reverse lookup will
be matched (case insensitive) against the pattern. Only an exact be matched (case insensitive) against the pattern. Only an exact
...@@ -279,6 +278,12 @@ itemize( ...@@ -279,6 +278,12 @@ itemize(
then the client is allowed in. then the client is allowed in.
) )
Note IPv6 link-local addresses can have a scope in the address specification:
quote(fe80::1%link1)
quote(fe80::%link1/64)
quote(fe80::%link1/ffff:ffff:ffff:ffff::)
You can also combine "hosts allow" with a separate "hosts deny" You can also combine "hosts allow" with a separate "hosts deny"
option. If both options are specified then the "hosts allow" option s option. If both options are specified then the "hosts allow" option s
checked first and a match results in the client being able to checked first and a match results in the client being able to
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment