Poul-Henning Kamp wrote:
> I have reworked the varnish ACL code, but am not done testing.
>
> There's a patch here:
>
>       http://phk.freebsd.dk/patch/varnish_acl.patch
>
> If any of you feel like beating it up, feel free to.
>
> The changes are:
>
>    * Do DNS lookups at compile time instead of child load time.  This
>      makes restarts (much) faster (for long ACLS) and reports the
>      DNS errors where&  when they are needed.
>
>    * Support IPv6 filtering.
>
> The ACL rules still have the same syntax, but the sematics have
> expanded to handle IPv6 also:
>
>      acl foo {
>
>       "foohost";              // Match, if the address is one of the
>                               // ipv4 or ipv6 addresses of "foohost"
>
>       ! "foohost";            // Fail, if...
>
>       "192.168.1.7" / 24;     // Use mask for comparison:  The '7' is
>                               // ignored
>    

Can you also write 192.168.1/24 ?

Wichert.

-- 
Wichert Akkerman<[EMAIL PROTECTED]>    It is simple to make things.
http://www.wiggy.net/                  It is hard to make things simple.

_______________________________________________
varnish-misc mailing list
[email protected]
http://projects.linpro.no/mailman/listinfo/varnish-misc

Reply via email to