cidr matching

Damien Miller djm at mindrot.org
Sat May 8 11:25:38 EST 2004


Darren Tucker wrote:

> While we're at it, would it make sense to teach "pattern-list" stuff in 
> match.c to understand CIDR notation?

If you are thinking of ssh_config, this is insufficient - the match and
application of config is done well before name->address lookup (it has
to, so the HostName directive can be used).

It may be possible to repeat the matching after the lookup, but then
global config options have already been applied and what do we do if
we match a specific host twice?

-d




More information about the openssh-unix-dev mailing list