[Swan-dev] "ip: add .any_port to ip_protoport, seems tcp/0 and tcp/%any are subtly"

Paul Wouters paul at nohats.ca
Tue May 26 02:47:24 UTC 2020


On Sun, 24 May 2020, Andrew Cagney wrote:

> There are two things kicking around - what range of ports is
> acceptable and what is allowed when there isn't an exact match.
>
> %any - narrow to single port in range 0-65536 so a single port is ok,
> but anything else gets chopped to something random
> 0 - don't narrow, must be 0-65535?
> %narrow - 0-65535 but can be less?
>
> presumably addresses have the same problem.

There is no "any one IP address" equivalent.

I guess we should really change that %any to be %one

(because %anyone would be confusing :)

Paul


More information about the Swan-dev mailing list