Wietse Venema:
> Darren Pilgrim:
> > Ok, bad example. ::1 and fe80::f00 are both valid addresses with less
> > than three octet pairs.
>
> Each has two ':', therefore three fields. Some fields are empty,
> in accordance with the convention for compressed IPv6 notation.
As documented in access(5), patterns are created by stripping
:octetpair from the right.
Thus, the *address* fe80::f00 will match the *pattern* fe80::f00,
fe80: and fe80; and the *address* ::1 will match the *pattern* ::1
and :.
If you need more precise control, use CIDR patterns, as noted in
the access(5) documentation.
Wietse