[Swan-dev] "ip: add .any_port to ip_protoport, seems tcp/0 and tcp/%any are subtly"
paul at nohats.ca
Tue May 26 02:47:24 UTC 2020
On Sun, 24 May 2020, Andrew Cagney wrote:
> There are two things kicking around - what range of ports is
> acceptable and what is allowed when there isn't an exact match.
> %any - narrow to single port in range 0-65536 so a single port is ok,
> but anything else gets chopped to something random
> 0 - don't narrow, must be 0-65535?
> %narrow - 0-65535 but can be less?
> presumably addresses have the same problem.
There is no "any one IP address" equivalent.
I guess we should really change that %any to be %one
(because %anyone would be confusing :)
More information about the Swan-dev