[asterisk-dev] [Code Review] Make ACLs IPv6-capable

[Simon Perreault]

On 2010-07-15 04:00, Olle E. Johansson wrote:
> While this may be clever, it will be much harder separating IPv4 and IPv6 addresses. If I want to deny all IPv4 but not IPv6 the syntax will be hard to find out, even though it's possible for IPv4. I can't figure out how you deny all IPv6 addresses this way. We might want to explore adding prefixes just to make the configuration easier to handle and read.
> 
> deny=ipv4,0.0.0.0
> deny=ipv6,0::0    ; Just deny all IPv6, but allow IPv4

You shouldn't have to specify "ipv4" or "ipv6" in the config file. It's
easy to distinguish between the two types based on just the address itself.

That said, you may be onto something here. What happens if I say

deny=::/0

Will that also block IPv4 completely?

I don't think it should.

Simon
-- 
NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca
STUN/TURN server        --> http://numb.viagenie.ca
vCard 4.0               --> http://www.vcarddav.org