| Re: -EXT-Re: [chrony-users] Using symbolic network names in /etc/chrony.conf file? |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-users Archives
]
- To: chrony-users@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: -EXT-Re: [chrony-users] Using symbolic network names in /etc/chrony.conf file?
- From: Denny Page <dennypage@xxxxxx>
- Date: Wed, 26 Jul 2017 00:24:42 -0700
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=me.com; s=04042017; t=1501053884; bh=7WZQ7G9KoDuWReseLmX67X5kznA1Sg4qu8NalGKP3Qw=; h=From:Content-type:MIME-version:Subject:Date:To:Message-id; b=l95C95Nw3BxSz+wKX79bjO+C/wxcNOPdpzs+LQ6UMbAvcFjVLeSlP/nlpkjMbRnI3 NodyiE8iqD5tD3VRdH3O7oxjiqINrUulbnvjGqSjjgU7E/o4W43ujmXXEZR61KzrGN 1OIA0436TiYo+3hDDa+vLEZRmgCbQ98JhuiO4ozS1fl4uyI6IZBg9UqTkc20OUEHJa vBm4dve8BU8ZBJ08h53dxzTvlXXiTIq3DJy9eYrRWhqF0fNK04stPmnF5PWInluBYS /iyvQ4a0RYVbfIuRifAmiPGEYP6+ACprM2XYwryYTIDzPtPaNhiXTdBWzmxUemeX3X kNqn9JwU7K5zg==
CIDR notation is for addresses, not for names. That host/mask works with iptables is unintended functionality. In other words, a bug.
Denny
> On Jul 26, 2017, at 00:04, Miroslav Lichvar <mlichvar@xxxxxxxxxx> wrote:
>
> On Tue, Jul 25, 2017 at 06:36:26PM +0000, Parker, Michael D. wrote:
>> BTW, I have use this format in specifying network ranges in IPTABLES
>> without a problem (EX: -A INPUT -s mynetwork/16 -j ACCEPT where my network
>> is defined in /etc/hosts) ...so this type of syntax is a known quantity and
>> the action is generally understood.
>
> Ok, so there is at least one program which accepts such syntax.
> However, from the man page I have a feeling the mask was supposed to
> work only with IP addresses.
>
> [!] -s, --source address[/mask][,...]
> Source specification. Address can be either a network name, a
> hostname, a network IP address (with /mask), or a plain IP
> address. Hostnames will be resolved once only, before the rule
> is submitted to the kernel. Please note that specifying any
> name to be resolved with a remote query such as DNS is a really
> bad idea. The mask can be either an ipv4 network mask (for ipt‐
--
To unsubscribe email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "unsubscribe" in the subject.
For help email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.