Final restriction cleanup (I hope)

Hal Murray hmurray at megapathdsl.net
Mon Sep 7 23:25:11 UTC 2020


Does anybody use any fancy restrictions?
Anybody ever used "restrict source xxx"?

I just pushed what I expect is the final cleanup to the restriction code area.
Time to go work on the documentation.

The most likely visible change will be the removal of boxus "poking hole" 
messages.

The basic problem is what to do if " server xxx" comes up with an IP Address 
that won't work because some restriction rule will block the responses.

There is code that will poke a hole in the restriction rules by adding a rule 
to let this specific IP Address through.  But only if the rule that would do 
the blocking is not blocking a single IP Address.  If you have that specific a 
rule, remove it.

That code only works if you have setup the new restriction flags you want to 
use with "restrict source xxx".  (xxx can be empty)



-- 
These are my opinions.  I hate spam.





More information about the devel mailing list