~mdw / firewall / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fb7845a) | patch
functions.m4, classify.m4: Handle negative address ranges.
authorMark Wooding <mdw@distorted.org.uk>
Fri, 23 Mar 2012 16:02:25 +0000 (16:02 +0000)
committerMark Wooding <mdw@distorted.org.uk>
Fri, 23 Mar 2012 18:52:13 +0000 (18:52 +0000)
commit1264e9177da9fb94a1fb85853220dd69a7108f0a
tree9c46f85264506e5c905cfdae17842b2977cbb929tree | snapshot (tar.gz zip)
parentfb7845a892c48e5004dea115bdd6b8a17fea7935commit | diff
functions.m4, classify.m4: Handle negative address ranges.

That is, a network can explicitly exclude an address range.  Ranges are
checked in order, so you carve out a hole in the middle of a range by
putting a negative range first for the hole first, and the big network
afterwards.

This involves a fairly major rearrangement of the address classification
machinery.  Again.
classify.m4 diff | blob | blame | history
functions.m4 diff | blob | blame | history
Firewall scripts for distorted.org.uk.