IPv6 Network subnets in PATTERNS ?

Darren Tucker dtucker at dtucker.net
Thu Oct 9 18:15:37 AEDT 2025


What are you trying to do?  Most of the things that take addresses support
IPv6 CIDR masks, eg:

$ cat test_config
Match localnetwork 2000::/8
    RefuseConnection "address matches"
Match All
    RefuseConnection "address does not match"

$ ssh -F test_config foo
test_config line 2: RefuseConnection: address matches

On Thu, 9 Oct 2025 at 17:45, hvjunk <hvjunk at gmail.com> wrote:

> Good Morning,
>
>  Reading on PATTERNS in ssh_config(5), I noticed only IPv4 wildcard and
> range options, but nothing for IPv6?
>
>  I especially are interested in PATTERNS that have network subnets, like
> 2001:0DB8:dead:beef::/64 and 192.168.128.0/23
>
> Hendrik
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
>


-- 
Darren Tucker (dtucker at dtucker.net)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


More information about the openssh-unix-dev mailing list