On fre, 2007-08-31 at 19:16 -0300, Michel Santos wrote: > well, I guess in 2.6 is something wrong at this special point, unless some > secret work fixed it (I have not checked > 14S), if you remember this is > not working with any 2.6 when coming from a local address, but with 2.5 it > is > > shortcut: > > #on 127.0.0.2 > acl peer src 127.0.0.1 > > gets 'access denied' for all requests from 127.0.0.1 > > #on 127.0.0.2 > acl peer src 127.0.0.1/32 > > and 127.0.0.1 goes through ... Then I guess you must have changed something else as well. 127.0.0.1 127.0.0.1/32 and 127.0.0.1/255.255.255.255 is all equivalent and matches the exact ip 127.0.0.1, and has always been.. The magic autodetection of the mask size in earlier releases only kick in if the ip ends in .0, but was inconsistent and therefore removed... There has not been any changes in this part of the code since 31 July 2006 when the mask size detection was removed.. Regards Henrik
Attachment:
signature.asc
Description: This is a digitally signed message part
