Forum: NGINX IPv6 range specification for allow/deny

Announcement (2017-05-07): www.ruby-forum.com is now read-only since I unfortunately do not have the time to support and maintain the forum any more. Please see rubyonrails.org/community and ruby-lang.org/en/community for other Rails- und Ruby-related community platforms.
2321fd7ae1506663bb08f243ee0466c4?d=identicon&s=25 Jens Rantil (Guest)
on 2013-08-15 13:53
(Received via mailing list)
Hi,

I'd like to limit a range of IPv6 space to a "server" context using
"allow" and "deny". I haven't been able to find any information on how
to do this in the documentation, nor on the web. The only example I've
found[1] is for fixed IPv6 adresses like so:

allow   2620:100:e000::8001;

[1] http://wiki.nginx.org/HttpAccessModule

So far I have tried

allow   2d00:1201::/32
allow   [2d00:1201::]/32

but nginx configuration validation complains. Is this IPv6 ranges
possible to allow/deny? What is the correct format? Any input would be
appreciated.

Thanks,
Jens
2154be8b4430488454f0a067e09863b9?d=identicon&s=25 Ruslan Ermilov (Guest)
on 2013-08-15 14:00
(Received via mailing list)
On Thu, Aug 15, 2013 at 11:51:33AM +0000, Jens Rantil wrote:
> allow   2d00:1201::/32
> allow   [2d00:1201::]/32
>
> but nginx configuration validation complains. Is this IPv6 ranges possible to
allow/deny? What is the correct format? Any input would be appreciated.

See the official docs:
http://nginx.org/en/docs/http/ngx_http_access_module.html
2321fd7ae1506663bb08f243ee0466c4?d=identicon&s=25 Jens Rantil (Guest)
on 2013-08-15 14:14
(Received via mailing list)
Hi,

Thanks for your link. Do you know which version that first had IPv6
ranges supported in allow/deny? I can't seem to get it to work.

Cheers,
Jens

-----Ursprungligt meddelande-----
Frn: nginx-bounces@nginx.org [mailto:nginx-bounces@nginx.org] Fr Ruslan
Ermilov
Skickat: den 15 augusti 2013 14:00
Till: nginx@nginx.org
mne: Re: IPv6 range specification for allow/deny

On Thu, Aug 15, 2013 at 11:51:33AM +0000, Jens Rantil wrote:
> allow   2d00:1201::/32
> allow   [2d00:1201::]/32
>
> but nginx configuration validation complains. Is this IPv6 ranges possible to
allow/deny? What is the correct format? Any input would be appreciated.

See the official docs:
http://nginx.org/en/docs/http/ngx_http_access_module.html

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
419b29425e1245886d653616ba381f00?d=identicon&s=25 Maxim Konovalov (Guest)
on 2013-08-15 14:21
(Received via mailing list)
On 8/15/13 4:13 PM, Jens Rantil wrote:
> Hi,
>
> Thanks for your link. Do you know which version that first had IPv6 ranges
supported in allow/deny? I can't seem to get it to work.
>
Just curious: what version do you use?

>> Hi,
>> allow   [2d00:1201::]/32
>
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>


--
Maxim Konovalov
http://nginx.com
2321fd7ae1506663bb08f243ee0466c4?d=identicon&s=25 Jens Rantil (Guest)
on 2013-08-15 15:38
(Received via mailing list)
I'm running 0.7.67.

Cheers,
Jens

-----Ursprungligt meddelande-----
Frn: Maxim Konovalov [mailto:maxim@nginx.com]
Skickat: den 15 augusti 2013 14:21
Till: nginx@nginx.org
Kopia: Jens Rantil
mne: Re: SV: IPv6 range specification for allow/deny

On 8/15/13 4:13 PM, Jens Rantil wrote:
> Hi,
>
> Thanks for your link. Do you know which version that first had IPv6 ranges
supported in allow/deny? I can't seem to get it to work.
>
Just curious: what version do you use?

>> Hi,
>> allow   [2d00:1201::]/32
>
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>


--
Maxim Konovalov
http://nginx.com
419b29425e1245886d653616ba381f00?d=identicon&s=25 Maxim Konovalov (Guest)
on 2013-08-15 16:32
(Received via mailing list)
On 8/15/13 5:37 PM, Jens Rantil wrote:
> I'm running 0.7.67.
>
IPv6 support for the "access" and "deny" directives appeared in
0.8.22 almost four years ago: http://nginx.org/en/CHANGES-0.8

Nowdays we ship 1.5.3 and 1.4.2 releases:
http://nginx.org/en/download.html

> On 8/15/13 4:13 PM, Jens Rantil wrote:
>> Frn: nginx-bounces@nginx.org [mailto:nginx-bounces@nginx.org] Fr Ruslan Ermilov
>>>
>> http://nginx.org/en/docs/http/ngx_http_access_module.html
>> http://mailman.nginx.org/mailman/listinfo/nginx
>>
>
>


--
Maxim Konovalov
http://nginx.com
This topic is locked and can not be replied to.