[bind10-dev] ACL Syntax proposal

[JINMEI Tatuya / 神明達哉]

At Sat, 4 Jun 2011 12:38:40 +0200,
Michal 'vorner' Vaner <michal.vaner at nic.cz> wrote:

> I still don't know how to write this more formally than I did.

I meant something like this:  Quoting BIND 9's ARM:

address_match_list = address_match_list_element ;
  [ address_match_list_element; ... ]
address_match_list_element = [ ! ] (ip_address [/length] |
   key key_id | acl_name | { address_match_list } )

Or referencing JUNOS on-line manual
http://www.juniper.net/techpubs/software/junos-es/junos-es93/junos-es-swcmdref/policies.html#jN2B90F

But now that we are apparently starting with match simpler definition,
it might be quite obvious only from examples (of course, what's
"obvious" is in the eye of the beholder.  Perhaps your previous
examples were obvious enough to you to understand everything; they
were not to me.  Likewise, what we are apparently trying to do may not
be that obvious to some others as I'm guessing).

---
JINMEI, Tatuya
Internet Systems Consortium, Inc.