Package: tcpd
Severity: minor

Hello,

I tried recently to understand why the following line in hosts.allow
sshd: x.y.237.0/23

could not be matched by x.y.236.[0..254] nor x.y.237.[0..254]. I
finally found that the right invocation was
sshd: x.y.236.0/23

that is, all the untested bit, in this case the 24th included, have to
be set to zero. My understanding of the mask is that, in this case, it
is used to test the m first bits of the match between target and
client adress, and the test should be insensitive to the other
bits. Maybe this could be documented somehow ?

Best regards

Pascal Dupuis

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.21
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to