> From: Chris Parker
> Sent: Saturday, 23 August 2003 2:10 AM

> At 04:55 PM 8/22/2003 +0100, Mike Bartling wrote:
> >What you're probably after is something along the lines of:

> >client 0.0.0.0/0 {
> >         secret = <secretstring>
> >         shortname = catchall
> >}
> 
> I believe that /0 mask is not allowed in FR currently.  Do you really
> have not smaller block/mask that your clients will fit into other
> than *allow anything to talk to my radius server*.

Looking at the code in the 0.9 branch, I can't see anything that
would deny a /0. The code checks for <0 or >32 when reading clients,
and when testing clients doesn't check the netmask before applying it.

However, it currently assumes the parts after the netmask in the
client IP address spec are 0'd out, or it won't match... I guess
that makes sense, sort of.

I know Alan's on record as saying he's against /0, but the code's
no longer so demanding.

--
=========================================================
Paul "TBBle" Hampson
Bubblesworth Pty Ltd (ABN: 51 095 284 361)
[EMAIL PROTECTED]

This is a one line proof...if we start
sufficiently far to the left.
        -- Cambridge University Math Department
---------------------------------------------------------
Random signature generator 3.0 by Paul "TBBle" Hampson
=========================================================


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to