On Wed, 16 Mar 2005, Corey Tyndall wrote:
Is it possible to allow based on domain?
Yes, by using the appropriate acl type.
If I use Ip ranges would it be like 123.123.0.0?
A single IP is ADDR/32
192.168.1.14/32
A range is A-B/32,
192.168.1.14-192.168.1.54/32
In both of the above you can skip the /32 provided the address ends in a non-zero number. You can also use /255.255.255.255 if you prefer.
A network is ADDR/MASK in either netmask or CIDR form
192.168.1.0/24 192.168.1.0/255.255.255.0
The acls takes lists of any mix of the above.
Regards Henrik
