On Friday, July 29, 2016 02:27:47 AM Vincent Lefevre wrote: > Package: postfix > Version: 3.1.0-4 > Severity: minor > > The cidr_table(5) man page contains: > > When a search string matches the specified network block, use > the corresponding result value. Specify 0.0.0.0/0 to match every > IPv4 address, and ::/0 to match every IPv6 address. > > An IPv4 network address is a sequence of four decimal octets > separated by ".", and an IPv6 network address is a sequence of > three to eight hexadecimal octet pairs separated by ":". > > but :: is not of the form: a sequence of three to eight hexadecimal > octet pairs separated by ":". Is the standard "::" zero compression > accepted (RFC 4291) more generally? > > Moreover, examples with IPv6 addresses could be added in Section > "EXAMPLE SMTPD ACCESS MAP".
I've reviewed the man page in question. I think you stopped just a little too soon: > Before comparisons are made, lookup keys and table entries > are converted from string to binary. Therefore table entries > will be matched regardless of redundant zero characters. I think that answers your question. I do agree an example to make it clearer would be nice, so I've sent a request upstream to add that. I'll at a link to the bug once it appears in their archive. Scott K
