<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On Nov 23, 2012, at 16:30 , Micha Glave wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">My fault both 2. and 3. doesn't work. <div><br></div><div>How is the correct notation?</div></blockquote><div><br></div><div><div class="gmail_extra"><div class="gmail_quote"><div>allow <a href="http://192.168.42.0/24" target="_blank">192.168.42.0/24</a>;</div><div><br></div><div>nginx tests both IPv4 and IPv4 mapped to IPv6 addresses</div><div>with this single rule.</div><div><br></div><div><div><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Georgia; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Georgia; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Georgia; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><br class="Apple-interchange-newline">--<br>Igor Sysoev<br></span></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Georgia; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><a href="http://nginx.com/support.html">http://nginx.com/support.html</a></span></div><div><br></div></span></span></div></div></div></div></div><blockquote type="cite"><div>Micha</div><div class="gmail_extra"><br><br><div class="gmail_quote">2012/11/23 Micha Glave <span dir="ltr"><<a href="mailto:nginx@migmedia.de" target="_blank">nginx@migmedia.de</a>></span><br>
<blockquote class="gmail_quote" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto; ">Hi<div><br></div><div>I wan't to allow just the local-IPv4-Subnet. Something like this:</div><div><br></div><div>listen *:80;</div>
<div>allow <a href="http://192.168.42.0/24" target="_blank">192.168.42.0/24</a>;</div><div>deny all;</div>
<div><br></div><div>After switching to IPv6-Dual-Layer I tried this ...</div><div><br></div><div>listen [::]:80;</div><div>allow ::ffff:<a href="http://192.168.42.0/120" target="_blank">192.168.42.0/120</a>;</div><div>deny all; </div>
<div>
<br></div><div><br></div><div>It doesn't work as expected. No one can see the page. </div><div>The following works: </div><div><br></div><div>listen [::]:80;</div>allow ::ffff:c0a8:2a00/120;<br>deny all; <div><br></div>
<div>In my opinion there should be a warning at the second. But it fails silently.</div><div><br></div><div>Should I post a bug-report for this?</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>Micha </div>
</font></span></blockquote></div></div></blockquote></div><br></body></html>