always use deny (was: How does DHCPD determine what IP address to assign and...)
dhcp1 at thehobsons.co.uk
Wed Jan 2 17:30:32 UTC 2008
Keith Neufeld wrote:
>>So you may just as well always use deny...
>That seems counterintuitive to me. _Almost_ always when I make a
>pool, it's to permit access by one or a small number of classes and
>deny everyone else, not to deny access by one or a small number of
>classes and permit everyone else. Semantically I'm doing an allow
>by a small group, and it makes most sense to me to do so
>syntactically as well.
>Am I in the minority?
If you are, then it's a minority group of 2 with me in it ;-)
I can't conceive of how the syntax could make sense without allow
being a valid option - we'll simply end up having to craft a
definition for "not <something>" and that's going to make things look
More information about the dhcp-users