[users@httpd] require ip ipset

[Vieri Di Paola <vi...@gmail.com>]

Hi,

I was wondering if it is complicated to implement ipset support for
the Require directive. Something like Require ip <ipset_name> (where
the ipset can be of types hash:ip, hash:net or bitmap:ip).

Vieri

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] require ip ipset

[Eric Covener <co...@gmail.com>]

On Wed, Jan 22, 2020 at 2:14 AM Vieri Di Paola <vi...@gmail.com> wrote:
>
> Hi,
>
> I was wondering if it is complicated to implement ipset support for
> the Require directive. Something like Require ip <ipset_name> (where
> the ipset can be of types hash:ip, hash:net or bitmap:ip).

Should be straightforward, see modules/aaa/mod_authz_host.c.

Because the APR library already knows how to check a IP against a
subnet/CIDR, the callback for "require ip" is less than 20 lines of
code including boilerplate stuff.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org