Hi, ToddAndMargo writes:
>> >> Le samedi 25 novembre 2017, 01:38:56 ToddAndMargo a écrit : >>> Hi All, >>> >>> In saned.conf, >>> >>> what is the proper syntax to allow all IP from a particular network: >>> >>> 192.168.100.0/24 >>> >>> and what is the syntax allow a range of networks: >>> >>> 192.168.100.0/24 through 192.168.105.0/24 >>> >>> >>> Many thanks, >>> -T >> > > On 11/25/2017 02:05 AM, e.m...@orange.fr wrote: > > Hello Sir, > > > > I'm not a specialist of sane but my search engine with "man > saned.conf" gave > > me the following page > > https://linux.die.net/man/8/saned > > where I see an example > > # Access list > > scan-client.somedomain.firm > > # this is a comment > > 192.168.0.1 > > 192.168.2.12/29 > > [::1] > > [2001:7a8:185e::42:12]/64 > > > > Is it clear enough? > > > > Have a nice Saturday > > > > Regards > > > Actually no. > > I had found that portion, but got frustrated with them > calling "hostnames" as "IP addresses". Not the same > thing. Hostname is before the IP address is resolved. You're right that host names and IP addresses are not the same thing, but the saned manual page says: The access list is a list of host names, IP addresses or IP subnets (CIDR notation) It doesn't say they are the same thing. It just says that you can use whatever combination of these three is most convenient for you. > And "192.168.2.12/29" which only gives you a single IP > address with its subnet mask. Using that would allow access from all eight IPv4 addresses that have the same 29 initial bits as 192.168.2.12. Please note that the CIDR notation was introduced exactly to allow addressing on arbitrary bit boundaries. See https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing > The above line shows that > you do not need the subnet mask. xxx.xxx.xxx.0/24 > tells you all the IP's from xxx.xxx.xxx.1 to 255 > > Can I get away with 192.168.222.0/23? That would > be 192.168.222 to 223. 1 to 255 Yes. Hope this helps, -- Olaf Meeuwissen, LPIC-2 FSF Associate Member since 2004-01-27 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13 F43E B8A4 A88A F84A 2DD9 Support Free Software https://my.fsf.org/donate Join the Free Software Foundation https://my.fsf.org/join -- sane-devel mailing list: sane-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel Unsubscribe: Send mail with subject "unsubscribe your_password" to sane-devel-requ...@lists.alioth.debian.org
