On Saturday 2011-01-08 05:20, Amos Jeffries wrote:
>>>>
>>>> FWIW: we (Squid project) use the syntax "ip[-ip][/mask]".
>>>
>>> I'm being curious : what is the meaning of "ip-ip/mask" when both the
>>> range and mask are present ?
>>
>> Sounds like
>>
The scheme (a-b)/msk:
>>
>> 192.168.0.64-192.168.191/255.255.255.253
>> <=>
>> 192.168.0.{64 65 68 69 72 73 76 77 77...}
>>
>> Well, it's probably of use... to someone.
Squid's a-lastof(b/plen):
> For yourselves I was thinking limit it to CIDR masks.
> As in:
> 192.168.1.0-192.168.10.0/23 ==> 192.168.1.0-192.168.11.255
If, for any combination of a,b,plen in your a-lastof(b/plen), you get a
contiuguous range [and that does seem to be the case], it is
redundant to store plen, since that can just be expressed by an
appropriate contiguous range a-c.
That said, a-b/plen does look confusing, because one might
also assume (a-b)/plen:
192.168.1.0-192.168.10.0/23 => 192.168.0.0-192.168.11.255
(Because 192.168.1.0/23's top is 192.168.0.0)
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
