28 Sep
2004
28 Sep
'04
5:43 p.m.
On Sep 28, 2004, at 5:30 AM, Andrei Pelinescu-Onciul wrote:
On Sep 26, 2004 at 14:13, Michael Shuler
<mike(a)bwsys.net> wrote:
This makes more sense to me. Either that or produce an error
message when parsing the ip/mask complaining about a bogus
network number, or a warning stating that the statement will never
match anything.
---greg
I figured it out. SER apparently uses strict sub
netting. A /27 is
32 IP's
and 80 is not evenly divisible by 32. I changed it to /28 which is
16 IP's
and since 80/16 = 5 with no remainder it now works. It would be nice
if SER
didn't have that limitation but its not that big of a deal because I
can
just put an || in the if statement.
For src_ip == ip/mask, ser does (src_ip & mask) == ip.
You would like it to do: (src_ip & mask) == (ip & mask) ? The change would be trivial, the only question is if
it brings any
unexpected matches. In your case x.x.x.80/27 would be equivalent to
x.x.x.64/27.
Andrei
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
Greg Fausak
www.AddaBrand.com
(US) 469-546-1265