[Serusers] Src_ip matching

[Andrei Pelinescu-Onciul]

On Sep 28, 2004 at 09:43, Greg Fausak <greg at addabrand.com> wrote:
> 
> On Sep 28, 2004, at 5:30 AM, Andrei Pelinescu-Onciul wrote:
> 
> >On Sep 26, 2004 at 14:13, Michael Shuler <mike at bwsys.net> wrote:
> >>I figured it out.  SER apparently uses strict sub netting.  A /27 is 
> >>32 IP's
> >>and 80 is not evenly divisible by 32.  I changed it to /28 which is 
> >>16 IP's
> >>and since 80/16 = 5 with no remainder it now works.  It would be nice 
> >>if SER
> >>didn't have that limitation but its not that big of a deal because I 
> >>can
> >>just put an || in the if statement.
> >
> >For src_ip == ip/mask, ser does (src_ip & mask) == ip.
> >You would like it to do:  (src_ip & mask) == (ip & mask) ?
> 
> This makes more sense to me.  Either that or produce an error
> message when parsing the ip/mask complaining about a bogus
> network number, or a warning stating that the statement will never
> match anything.

I've just made ser (unstable cvs) to fix this and issue a warning.
(net.ip= net.ip & net.mask)

Andrei