You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by astrograph <as...@gmx.net> on 2004/09/15 20:29:34 UTC
authorizedAdresses for smtp
hi,
I have a question regarding authorizedAddresses for James as an SMTP server....
in my config file I have the following:
<authorizedAddresses>127.0.0.0/8,192.168.*</authorizedAddresses>
I thought that would allow e.g. 192.168.34.98 to connect but not 196.178.23.12...
in the log for the smtpserver I noticed the following line:
15/09/04 20:21:22 INFO smtpserver: Authorized addresses: [127.0.0.0/255.0.0.0, 192.168.0.0/255.255.0.0]
is this correct?? I thought it should read 127.0.0.0/127.0.0.255, 192.168.0.0/192.168.255.255
???
cheers,
Philipp
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: authorizedAdresses for smtp
Posted by astrograph <as...@gmx.net>.
hi Serge,
ok - i was not sure about that /8 business, our operations came up with that, does 127.0.0.0/8 mean from 127.0.0.0 to
255.0.0.0 and does 192.168.* mean from 192.168.0.0 to 255.255.0.0 ?
cheers,
philipp
Serge Knystautas wrote:
> astrograph wrote:
>
>> I have a question regarding authorizedAddresses for James as an SMTP
>> server....
>>
>> in my config file I have the following:
>>
>> <authorizedAddresses>127.0.0.0/8,192.168.*</authorizedAddresses>
>>
>> I thought that would allow e.g. 192.168.34.98 to connect but not
>> 196.178.23.12...
>>
>> in the log for the smtpserver I noticed the following line:
>>
>> 15/09/04 20:21:22 INFO smtpserver: Authorized addresses:
>> [127.0.0.0/255.0.0.0, 192.168.0.0/255.255.0.0]
>>
>> is this correct?? I thought it should read 127.0.0.0/127.0.0.255,
>> 192.168.0.0/192.168.255.255
>
>
> You want 127.0.0.0/24.
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: authorizedAdresses for smtp
Posted by Serge Knystautas <se...@lokitech.com>.
astrograph wrote:
> I have a question regarding authorizedAddresses for James as an SMTP
> server....
>
> in my config file I have the following:
>
> <authorizedAddresses>127.0.0.0/8,192.168.*</authorizedAddresses>
>
> I thought that would allow e.g. 192.168.34.98 to connect but not
> 196.178.23.12...
>
> in the log for the smtpserver I noticed the following line:
>
> 15/09/04 20:21:22 INFO smtpserver: Authorized addresses:
> [127.0.0.0/255.0.0.0, 192.168.0.0/255.255.0.0]
>
> is this correct?? I thought it should read 127.0.0.0/127.0.0.255,
> 192.168.0.0/192.168.255.255
You want 127.0.0.0/24.
--
Serge Knystautas
Lokitech >> software . strategy . design >> http://www.lokitech.com
p. 301.656.5501
e. sergek@lokitech.com
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: authorizedAdresses for smtp
Posted by astrograph <as...@gmx.net>.
hi Noel,
>>Authorized addresses: [127.0.0.0/255.0.0.0, 192.168.0.0/255.255.0.0]
>
>
> Correct. Those are the proper network/netmask notations.
oh dear, I just assumed that the two ip´s were delimiting a range, that
the second is the netmask did not come to my mind!!
no need to explain the netmask, this is something even I know a little
about!!!
thanks a lot for clearing up my confusion!
Philipp
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
RE: authorizedAdresses for smtp
Posted by "Noel J. Bergman" <no...@devtech.com>.
> <authorizedAddresses>127.0.0.0/8,192.168.*</authorizedAddresses>
> I thought that would allow e.g. 192.168.34.98 to connect but not
> 196.178.23.12.
Correct. All 127.* addresses (localhost) + anything matching 192.168.*.
This * notation is ad hoc but shorter to type than the truely meaningful
netmask notation.
> Authorized addresses: [127.0.0.0/255.0.0.0, 192.168.0.0/255.255.0.0]
Correct. Those are the proper network/netmask notations.
> I thought it should read 127.0.0.0/127.0.0.255,
192.168.0.0/192.168.255.255
No. Those are wrong. You need to understand how a network and netmask work
to provide subnet matching. I apologize, but I lack the time to do that
today. You can look at the NetMatcher code in o.a.james.util, and hopefully
someone can explain it. It is all about binary masking.
Your operations people gave you the right information.
--- Noel
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org