defines ip to acl

2016-10-17 Thread Pol Hallen
Hello all :-) I need to setup 2 kind of acl on same network, ie: ip from 192.168.1.1 to 192.168.1.99 belongs to acl1 and ip from 192.168.1.100 to 192.168.1.199 to acl2 acl net1 { 192.168.1.1-99/24 }; acl net1 { 192.168.1.99-199/24 }; what's the correct way? I didn't find nothing :-/ thanks fo

Re: defines ip to acl

2016-10-17 Thread McDonald, Daniel (Dan)
Acls don’t support ranges, only prefixes. You don’t want the whole /24. I think you want: acl net1 {192.168.1.0/26; 192.168.1.64/27; 192.168.1.96/30; } acl net2 {192.168.1.100/30; 192.168.104/29; 192.168.1.112/28; 192.168.1.128/26; 192.168.1.192/29; } On 2016-10-17, 13:41, "bind-users on be

RE: defines ip to acl

2016-10-17 Thread Darcy Kevin (FCA)
well? :-) - Kevin -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Pol Hallen Sent: Monday, October 17, 2016 2:37 PM To: bind-users@lists.isc.org Subject: defines ip to acl Hello all :-) I need to setup 2 ki

Re: defines ip to acl

2016-10-17 Thread Pol Hallen
Acls don’t support ranges, only prefixes. You don’t want the whole /24. I think you want: acl net1 {192.168.1.0/26; 192.168.1.64/27; 192.168.1.96/30; } acl net2 {192.168.1.100/30; 192.168.104/29; 192.168.1.112/28; 192.168.1.128/26; 192.168.1.192/29; } thanks guys :-) _

RE: defines ip to acl

2016-10-17 Thread Darcy Kevin (FCA)
ssage- From: Darcy Kevin (FCA) Sent: Monday, October 17, 2016 3:11 PM To: bind-users@lists.isc.org Subject: RE: defines ip to acl Well, things are messy, because you haven't carved up your subnet on bit-boundaries. BIND ACLs are either individual IPs, CIDR blocks, negations, or some comb

Re: defines ip to acl

2016-10-17 Thread Pol Hallen
And don't forget the copious comments in named.conf, so that your successor can easily see, at a glance, what start/end addresses those clusters of ACL elements represent. sure! :-) thanks Pol ___ Please visit https://lists.isc.org/mailman/listinf