On Wed, Apr 28, 2010 at 2:13 PM, Juha Heinanen
<jh@tutpro.com> wrote:
Iņaki Baz Castillo writes:
> However after checking the module code it seems that there are just
> two cases:
> - IP addresses (mask = 32).
> - Subnets (mask != 32).
>
> So first the source address is always matched against he address hash,
> and if it doesn't match then it is matched against the subnet hash,
> but in this last case it is not taken into account any kind of
> priority based on mask value, am I right?
yes, if address does not match exactly, the any address/mask that
matches results in success.
-- juha