address/prefix length mismatch

[Elias Pereira]

>
> No, it's not. This is ACL specification, not a interface/network
> configuration.

Ok.


> No, I've already provided you with a correct answer what 10.60.0.0/23 means
> in terms of range, why do you insist on this?

ok.

> I think others have already answered that, I would be just repeating their
> answers.

Ok.

Thanks!!!

On Wed, Aug 24, 2022 at 11:05 AM Ondřej Surý <ondrej at isc.org> wrote:

>
> On 24. 8. 2022, at 15:58, Elias Pereira <empbilly at gmail.com> wrote:
>
> hello Ondrej,
>
> Not completely wrong, because 255 is the broadcast.
>
>
> No, it's not. This is ACL specification, not a interface/network
> configuration.
>
> For a better understanding, then it would be Available range 10.60.0.1 to
> 10.60.1.254.
>
>
> No, I've already provided you with a correct answer what 10.60.0.0/23
> means in terms of range, why do you insist on this?
>
> Correctly specified range (without address/host bits) does takes the whole
>> range.
>
>
> Like this 10.60/23; ?
>
>
> I think others have already answered that, I would be just repeating their
> answers.
>
> Ondrej
> --
> Ondřej Surý (He/Him)
> ondrej at isc.org
>
> My working hours and your working hours may be different. Please do not
> feel obligated to reply outside your normal working hours.
>
>
> On Wed, Aug 24, 2022 at 10:33 AM Ondřej Surý <ondrej at isc.org> wrote:
>
>>
>>
>> On 24. 8. 2022, at 15:26, Elias Pereira <empbilly at gmail.com> wrote:
>>
>> 
>> Hello Greg,
>>
>> Why doesn't bind work with networks/subnets in the conventional way?
>>
>>
>> It does.
>>
>> If the private subnet is 10.60.0.0/23, then it means that the address
>> range is 10.60.0.1 to 10.60.1.254.
>>
>>
>> That’s wrong. 10.60.0.0/23 means 10.60.0.0 to 10.60.1.255 range.
>>
>> How do I configure this ACL in named.conf.local so that it takes the
>> whole range?
>>
>>
>> Correctly specified range (without address/host bits) does takes the
>> whole range.
>>
>> Ondrej
>> --
>> Ondřej Surý — ISC (He/Him)
>>
>> My working hours and your working hours may be different. Please do not
>> feel obligated to reply outside your normal working hours.
>>
>> On Wed, Aug 24, 2022 at 9:31 AM Anand Buddhdev <anandb at ripe.net> wrote:
>>
>>> On 24/08/2022 14:16, Elias Pereira wrote:
>>>
>>> Hi Elias,
>>>
>>> > Oh, sorry... :D
>>> >
>>> > here it is
>>> >
>>> > # cat named.conf.local
>>> > # ACL das redes internas
>>> > # Ultima modificação: 24/08/2022
>>> >
>>> > acl "internal" {
>>> > 10.60.0.1/23;
>>>
>>> This is the issue. The address part of the prefix should be the lowest
>>> address in that prefix. If you change this to 10.60.0.0/23, it will be
>>> fine. The same goes for all the other prefixes in your list. Change the
>>> 1's to 0's.
>>>
>>> > 10.10.1.1/24;
>>> > 10.10.2.1/25;
>>> > 10.10.3.1/25;
>>> > 10.10.4.1/25;
>>> > 10.10.5.1/25;
>>> > 10.51.0.1/23;
>>> > 10.10.6.1/25;
>>> > 10.10.7.1/26;
>>> > 172.20.0.1/26;
>>> > 10.50.0.1/23;
>>> > 10.40.0.1/22;
>>> > 10.56.0.1/22;
>>> > };
>>>
>>
>>
>> --
>> Elias Pereira
>> --
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>> from this list
>>
>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>
>>
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
>>
>>
>
> --
> Elias Pereira
>
>
>

-- 
Elias Pereira
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20220824/ea562868/attachment.htm>