Hi,
I notice that if I use standard member policyd there is a problem.
In Default outbound policy there is:
%internal_ips,%internal_domains
This never match for me, because domains group is not checked.
From log:
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:2/Name:Default
Outbound]: Main policy sources '%internal_ips,%internal_domains'
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:2/Name:Default
Outbound]: Group 'internal_ips' has 1 source(s) => 127.0.0.0/8
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:2/Name:Default
Outbound]=>(group:internal_ips): - Resolved source '127.0.0.0/8' to a
IP/CIDR specification, match = 0
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:2/Name:Default
Outbound]=>(group:internal_ips): Source group result: matched=0
[2016/09/04-13:49:19 - 24227] [POLICIES] INFO: [ID:2/Name:Default
Outbound]: Source matching result: matched=0
Instead the opposite is checked regularly.
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:3/Name:Default
Inbound]: Main policy sources '!%internal_ips,!%internal_domains'
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:3/Name:Default
Inbound]: Group 'internal_ips' has 1 source(s) => 127.0.0.0/8
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:3/Name:Default
Inbound]=>(group:internal_ips): - Resolved source '127.0.0.0/8' to a
IP/CIDR specification, match = 0
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:3/Name:Default
Inbound]=>(group:internal_ips): Source group result: matched=0
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:3/Name:Default
Inbound]: Group 'internal_domains' has 3 source(s) =>
@xxx.it,@xxxx.it,@xxxx.it
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:3/Name:Default
Inbound]=>(group:internal_domains): - Resolved source '@xxxx.it' to a
email address specification, match = 1
[2016/09/04-13:49:19 - 24227] [POLICIES] DEBUG: [ID:3/Name:Default
Inbound]=>(group:internal_domains): Source group result: matched=1
[2016/09/04-13:49:19 - 24227] [POLICIES] INFO: [ID:3/Name:Default
Inbound]: Source matching result: matched=0
I have obscured the domain name in the above lines.
So the comma is working as OR or as AND?
I'm on Centos 7 and I'm using policyd v2.1.x-201310261831
downloaded in .rpm from policyd.org
ThankYou
--
Gelpi ing. Andrea
--------------------------------------------------------------
It took the computing power of three C-64s to fly to the Moon.
It takes a 486 to run Windows 95. Something is wrong here.
--------------------------------------------------------------
_______________________________________________
Users mailing list
[email protected]
http://lists.policyd.org/mailman/listinfo/users_lists.policyd.org
