Allow IPv6/Mask

Server NGINX
1

Hi

I wan’t to allow just the local-IPv4-Subnet. Something like this:

listen *:80;
allow 192.168.42.0/24;
deny all;

After switching to IPv6-Dual-Layer I tried this …

listen [::]:80;
allow ::ffff:192.168.42.0/120;
deny all;

It doesn’t work as expected. No one can see the page.
The following works:

listen [::]:80;
allow ::ffff:c0a8:2a00/120;
deny all;

In my opinion there should be a warning at the second. But it fails
silently.

Should I post a bug-report for this?

Micha

2

My fault both 2. and 3. doesn’t work.

How is the correct notation?

Micha

2012/11/23 Micha G. [email protected]

3

On Nov 23, 2012, at 16:30 , Micha G. wrote:

My fault both 2. and 3. doesn’t work.

How is the correct notation?

allow 192.168.42.0/24;

nginx tests both IPv4 and IPv4 mapped to IPv6 addresses
with this single rule.

–
Igor S.