[Serusers] Src_ip matching

[Greg Fausak]

On Sep 28, 2004, at 5:30 AM, Andrei Pelinescu-Onciul wrote:

> On Sep 26, 2004 at 14:13, Michael Shuler <mike at bwsys.net> wrote:
>> I figured it out.  SER apparently uses strict sub netting.  A /27 is 
>> 32 IP's
>> and 80 is not evenly divisible by 32.  I changed it to /28 which is 
>> 16 IP's
>> and since 80/16 = 5 with no remainder it now works.  It would be nice 
>> if SER
>> didn't have that limitation but its not that big of a deal because I 
>> can
>> just put an || in the if statement.
>
> For src_ip == ip/mask, ser does (src_ip & mask) == ip.
> You would like it to do:  (src_ip & mask) == (ip & mask) ?

This makes more sense to me.  Either that or produce an error
message when parsing the ip/mask complaining about a bogus
network number, or a warning stating that the statement will never
match anything.

---greg


> The change would be trivial, the only question is if it brings any
> unexpected matches. In your case x.x.x.80/27 would be equivalent to
>  x.x.x.64/27.
>
> Andrei
>
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
>
>
Greg Fausak
www.AddaBrand.com
(US) 469-546-1265