[SR-Users] [permissions] 'address' table and mask priorirty

Iñaki Baz Castillo ibc at aliax.net
Wed Apr 28 19:20:19 CEST 2010


2010/4/28 Uriel Rozenbaum <uriel.rozenbaum at gmail.com>:
> Iñaki,
>
> Maybe you can try with 2 masks that are not 32.
> example:
>
> Entry 1:
> - grp   = 1
> - ip_addr =  9.9.9.128
> - mask   =  25
>
> Entry 2:
> - grp   = 2
> - ip_addr =  9.9.9.0
> - mask   =  24
>
> And then verify if the order or id matters. But as per Juha's comment, the
> result can be unpredictable.

Yes, it's also clear from the code. The subnets are matched until one
matches, and that's all.


> Maybe we can develop an exported function that can take into account the mask
> to get the most exact entry.

IMHO it shouldn't be an opcional parameter or a different exported
function, but just the default behavior as it really makes sense
(IMHO).

Regards.


-- 
Iñaki Baz Castillo
<ibc at aliax.net>




More information about the sr-users mailing list