Skip to content
Snippets Groups Projects
Verified Commit 4944c6b0 authored by Tomas Krizek's avatar Tomas Krizek
Browse files

modules/view/README: mention v4-mapped-on-v6 syntax

Related #445
parent 8ac17bbd
No related branches found
No related tags found
No related merge requests found
Pipeline #44732 failed
...@@ -53,6 +53,11 @@ Example configuration ...@@ -53,6 +53,11 @@ Example configuration
-- Drop everything that hasn't matched -- Drop everything that hasn't matched
view:addr('0.0.0.0/0', policy.all(policy.DROP)) view:addr('0.0.0.0/0', policy.all(policy.DROP))
.. note:: When using systemd socket activation, it's possible to bind to IPv6
socket that also handles IPv4 connections via v4-mapped-on-v6 addresses.
With this setup, using IPv4 syntax in ``view:addr()`` is currently not
supported. Instead, you can use the v4-mapped-on-v6 syntax, e.g.
``::ffff:127.0.0.0/104`` instead of ``127.0.0.0/8``.
Rule order Rule order
^^^^^^^^^^ ^^^^^^^^^^
...@@ -76,14 +81,14 @@ Properties ...@@ -76,14 +81,14 @@ Properties
:param subnet: client subnet, i.e. ``10.0.0.1`` :param subnet: client subnet, i.e. ``10.0.0.1``
:param rule: added rule, i.e. ``policy.pattern(policy.DENY, '[0-9]+\2cz')`` :param rule: added rule, i.e. ``policy.pattern(policy.DENY, '[0-9]+\2cz')``
Apply rule to clients in given subnet. Apply rule to clients in given subnet.
.. function:: view:tsig(key, rule) .. function:: view:tsig(key, rule)
:param key: client TSIG key domain name, i.e. ``\5mykey`` :param key: client TSIG key domain name, i.e. ``\5mykey``
:param rule: added rule, i.e. ``policy.pattern(policy.DENY, '[0-9]+\2cz')`` :param rule: added rule, i.e. ``policy.pattern(policy.DENY, '[0-9]+\2cz')``
Apply rule to clients with given TSIG key. Apply rule to clients with given TSIG key.
.. warning:: This just selects rule based on the key name, it doesn't verify the key or signature yet. .. warning:: This just selects rule based on the key name, it doesn't verify the key or signature yet.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment