Forum: NGINX allow IPv6/Mask

Hi

I wan't to allow just the local-IPv4-Subnet. Something like this:

listen *:80;
allow 192.168.42.0/24;
deny all;

After switching to IPv6-Dual-Layer I tried this ...

listen [::]:80;
allow ::ffff:192.168.42.0/120;
deny all;


It doesn't work as expected. No one can see the page.
The following works:

listen [::]:80;
allow ::ffff:c0a8:2a00/120;
deny all;

In my opinion there should be a warning at the second. But it fails
silently.

Should I post a bug-report for this?

Micha

My fault both 2. and 3. doesn't work.

How is the correct notation?

Micha


2012/11/23 Micha Glave <nginx@migmedia.de>

On Nov 23, 2012, at 16:30 , Micha Glave wrote:

> My fault both 2. and 3. doesn't work.
>
> How is the correct notation?

allow 192.168.42.0/24;

nginx tests both IPv4 and IPv4 mapped to IPv6 addresses
with this single rule.


--
Igor Sysoev
http://nginx.com/support.html