I would like to match the 2a04:5200:fff4:0 IPv6 addresses (/64 block) in an access table (and I'd like to avoid using a cidr lookup table for specific cases). I have
2a04:5200:fff4:0 REJECT Blacklisted However, 2a04:5200:fff4::fe was not caught. The access(5) man page says "The access map lookup key must be in canonical form" but this is ambiguous as RFC 5952 does not specify canonical form for subnetworks. For instance, if the IPv6 address is 2a04:5200:fff4:0:1:0:0:1, then its canonical form would be 2a04:5200:fff4:0:1::1, so that the 2a04:5200:fff4:0 prefix is necessarily valid. -- Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)