IPv6 hosts allow|deny

[Bert Vermeulen]

On Fri, 10 Jan 2003, Bert Vermeulen wrote:

> On Thu, 9 Jan 2003, Dave Dykstra wrote:
>
> > I went ahead and submitted Hideaki's patch pretty much as is.  I took off
> > the ifdef around the memset at the beginning of client_sockaddr() because
> > I figured it wouldn't hurt to do anywhere.  Besides, it was checking
> > for a specific operating system (__linux__) which we like to avoid and
> > because there was a typo in the check for HAVE_SOCKADDR_IN6_SCOPE_ID
> > (it was HAVE_SOCKADDR_IN6_SOCPE_ID).  I noticed that there was code in
> > access.c that was accessing the same sockaddr_in6 sin6_scope_id field that
> > was protected by ifdef in clientname.c so I put the same ifdef around
> > the code in access.c.  I also updated the rsyncd.conf.yo documentation
> > to allow for IP address of the IPv6 form.
> >
> > I have not tested this, I hope it works.
>
> Dave,
>
> Sorry for the late reply, been busy. I'm going to test with the committed
> patch, and will let you know. I can only test on linux, however.

Well, it works great for me. It might be a good idea to include Hideaki's
comments on this syntax in the docs:

> Note that scope-id is also supported:
>  - fe80::1%eth0
>  - fe80::%eth0/64
>  - fe80::%eth0/ffff:ffff:ffff:ffff::

The example is significant -- this restricts access to the local subnet
only.


Bert Vermeulen
bert at biot.com
--
Profanity is the inevitable linguistic crutch of the inarticulate motherfucker.