Re: acls with ip ranges

On Wed, 12 Jan 2005, Thomas Jarosch wrote:

> # NIC eth0 89.0.31.80/255.0.0.0
> acl net1 src 89.0.0.0-89.0.21.0
> http_access allow net1
> acl net2 src 89.0.21.31-89.0.31.0
> http_access allow net2
>
> Squid outputs this during startup:
> aclParseIpData: WARNING: Netmask masks away part of the specified IP
> in '89.0.21.31-89.0.31.0'
>
> 89.0.31.0 is a valid IP for the 89.0.31.80/8 network.
> I could add a "/32" behind the "89.0.21.31-89.0.31.0",
> but I suspect there is a problem (by design?) in the acl parser.

The parser automatically tries to guess the netmask if none is specified.
Quite often it guesses wrongly..

Regards
Henrik
Received on Wed Jan 12 2005 - 08:40:04 MST