From mboxrd@z Thu Jan 1 00:00:00 1970 From: Phil Oester Subject: Re: iptables 1.3.6 not using /etc/networks Date: Sun, 12 Nov 2006 11:43:14 -0800 Message-ID: <20061112194314.GA3542@linuxace.com> References: <20061112173312.GA2593@linuxace.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "Laurence J. Lane" , netfilter-devel@lists.netfilter.org Return-path: To: Alexey Toptygin Content-Disposition: inline In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org On Sun, Nov 12, 2006 at 07:36:34PM +0000, Alexey Toptygin wrote: > >Not sure offhand how we can satisfy both cases here, but I'd posit > >that more people use x.x.x/24 than use foonet/x notation. > > Isn't it always true that foonet/y starts with a letter and x.x.x/y starts > with a digit? In this case, checking that the string starts with a digit > before searching it for '.' characters and appending '.0's should work. But if you use a FQDN such as www.domain.com/24, then shouldn't that then imply /24? That's why I didn't make the exception for letters vs. digits, as it could be used either way. /etc/networks certainly throws a wrench in the works. Phil