Address-match-lists and subnetmasks

Walkenhorst, Benjamin Benjamin.Walkenhorst at telekom.de
Tue Sep 28 09:49:28 UTC 2004


Hello everyone,

If I specify an acl like this:
acl "mynet" { 192.168/16; };

...and then define two views like this:

view "internal" {
	match-clients { mynet; };
	...
};

view "external" {
	match-clients { !mynet; any; };
	...
};

I am wondering what my host might get to see, if its
IP-adress is, say, 192.168.0.13/24.
So how does BIND handle IP-adress and network mask? Does the network
mask have to match the one given in the acl _exactly_, or does '192.168/16'
mean to BIND 'all IP-adresses beginning with 192.168'?
The BIND-ARM did not turn up useful information on this...


Thanks a lot in advance,

Benjamin Walkenhorst


More information about the bind-users mailing list