Re: Stumped on anti-relay

Página superior
Eliminar este mensaje
Responder a este mensaje
Autor: Chris Thompson
Fecha:  
A: david
Cc: exim-users
Asunto: Re: Stumped on anti-relay
I wrote:
> Anyway, surely you mean 204.214.108.0/255.255.252.0 or
> 204.214.110.0/255.255.254.0, not 204.214.110.0/255.255.252.0 ?


David Miller wrote:
>
> I mean networks 204.214.110, 204.214.111, 204.214.112, 204.214.113,
> 204.214.118 and 204.214.119. That would be
> 204.214.110.0/255.255.252.0:204.214.118.0/255.255..254.0 wouldn't it?


Er, no. it would be

204.214.110.0/255.255.254.0
204.214.112.0/255.255.254.0
204.214.118.0/255.255.254.0

The first two can't be combined in the way you suggest. a/b means "those
IP addresses x such that (x & b) == (a & b)" [that's what Exim seems to
do in verify_setup_netlist, anyway - it's normally considered to be
rather confusing to specify a/b such that (a & b) \= a]. Your 110-113
block is not an *aligned* set of 1024 addresses.

This is just like netmasks in your /etc/netmasks, router tables, or
whatever...

Chris Thompson               Cambridge University Computing Service,
Email: cet1@???    New Museums Site, Cambridge CB2 3QG,
Phone: +44 1223 334715       United Kingdom.