Thats right, you can say IP=allow or you have to use a regex for a
full network.

Regards,
Jan

Robert Kulagowski wrote:
> On Thu, Nov 3, 2011 at 3:12 AM, David Dahlberg
> <david.dahlb...@fkie.fraunhofer.de> wrote:
> > You may still restrict the usage of the status port using
> > [GkStatus::Auth].
> 
> Yes, I'm doing that.  If I have my regex correct it should only allow
> connections from 10/8 and the localhost:
> 
> [GkStatus::Auth]
> rule=regex | explicit
> regex=^10\.[0-9]+\.[0-9]+\.[0-9]+$
> 127.0.0.1=allow
> default=forbid
> Shutdown=allow
> status=allow
> 
> Jan, this appears to be one place in the code that doesn't allow a
> CIDR-style notation; 10.244.0.0/16=allow didn't work when I first
> tried it?

-- 
Jan Willamowius, j...@willamowius.de, http://www.gnugk.org/

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________________

Posting: mailto:Openh323gk-users@lists.sourceforge.net
Archive: 
http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

Reply via email to