NFR: couriertcpd(8) 'maxperc' -> 'maxperslash24', or so.

View: New views
2 Messages — Rating Filter:   Alert me  

NFR: couriertcpd(8) 'maxperc' -> 'maxperslash24', or so.

by Brian A. Seklecki (CFI NOC) :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


All:

  There haven't been classes on the interwebs since Al Gore
  invented it.

  Also, how would this feature work on v6?

  The assumption here is that /24s are movable feasts to RIRs,
  but really, BGP prefix lists stop at /20 or /21

  In English: ARIN and others won't hand out anything smaller
  than /20 to an ISP, so, on v4 we should do CIDR
  calculations that way.

  On /v6, it's safe to assume ::/48 (ISPs get /32's)

 Also, the man page say which, MAXPERIP or MAXPERC takes
 precedence.  MAXCPERIP should also have a note.

~BAS



------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
courier-users mailing list
courier-users@...
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Re: NFR: couriertcpd(8) 'maxperc' -> 'maxperslash24', or so.

by Brian A. Seklecki (CFI NOC) :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

> 6, it's safe to assume ::/48 (ISPs get /32's)
>
>  Also, the man page say which, MAXPERIP or MAXPERC takes

Err small correction, that should ready "Doesn't say":

In tcpd/tcpd.c::run():

  Just briefly reading through the code (The pointer algorithmic
  for calculating netblocks seems odd, using sizeof() on a pointer
  to an RFC1035 address).  

  The IP gets compared to the global MAXIP, if you've over, exit
  and error log.

  Then, sequentially:

  The IP gets compared against the count for the subnet (a strange
  array based on the IP address size (8,16,32 bits?), if over, exit
  and error log

  e.g, for the man page, "MAXPERC superceds/overrides MAXPERIP"

  However, if SMTPACCESS has an exception for a matching IP
  using MAXCPERIP, set MAXIP higher during the loop.

  But that means, AFAICT, that MAXPERC still overrides MAXCPERIP.

~BAS
 


>  precedence.  MAXCPERIP should also have a note.
>
> ~BAS
>
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> courier-users mailing list
> courier-users@...
> Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users



------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
courier-users mailing list
courier-users@...
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users