Thats right, you can say IP=allow or you have to use a regex for a full network. Regards, Jan Robert Kulagowski wrote: > On Thu, Nov 3, 2011 at 3:12 AM, David Dahlberg > <david.dahlberg@xxxxxxxxxxxxxxxxxx> wrote: > > You may still restrict the usage of the status port using > > [GkStatus::Auth]. > > Yes, I'm doing that. If I have my regex correct it should only allow > connections from 10/8 and the localhost: > > [GkStatus::Auth] > rule=regex | explicit > regex=^10\.[0-9]+\.[0-9]+\.[0-9]+$ > 127.0.0.1=allow > default=forbid > Shutdown=allow > status=allow > > Jan, this appears to be one place in the code that doesn't allow a > CIDR-style notation; 10.244.0.0/16=allow didn't work when I first > tried it? -- Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/ ------------------------------------------------------------------------------ RSA(R) Conference 2012 Save $700 by Nov 18 Register now http://p.sf.net/sfu/rsa-sfdev2dev1 _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
