[asterisk-dev] [Code Review] Make ACLs IPv6-capable

[Simon Perreault]

On 2010-07-15 11:25, Klaus Darilion wrote:
> I would prefer to differ between v4 and v6 addresses using the 
> [ipv6address] notation (as many other software does), e.g.:
> 
> deny=0.0.0.0
> deny=[0::0]

This is wrong. Using brackets means that ports are allowed, while they
are not in this case.

Brackets are not for differentiating between IPv4 and IPv6. They are for
allowing ports with IPv6 addresses.

> This also solves issues where a socket is specified, e.g:
> 
> udpbindaddr=0.0.0.0
> udpbindaddr=1234::5678:5070 ; is 5070 the port or part of the address?
> udpbindaddr=[1234::5678:5070] ; 5070 is part of the address
> udpbindaddr=[1234::5678]:5070 ; 5070 is the port

We do support brackets in udpbindaddr. In fact, the port variable is
deprecated.

But for variables where no port is allowed, brackets should not be used.

Simon
-- 
NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca
STUN/TURN server        --> http://numb.viagenie.ca
vCard 4.0               --> http://www.vcarddav.org