[Qa-jenkins-scm] [Git][qa/jenkins.debian.net][master] cs16/squid: correctly allow only the /24 subnet of the 192.168.101.0 network

[Mattia Rizzolo]

Mattia Rizzolo pushed to branch master at Debian QA / jenkins.debian.net


Commits:
daeeb033 by Mattia Rizzolo at 2018-10-09T11:29:28Z
cs16/squid: correctly allow only the /24 subnet of the 192.168.101.0 network

the notation previously used would have allowed the whole /16, despite a
single address being specified.

This was also causing warnings:

2018/10/09 06:25:09| aclIpParseIpData: WARNING: Netmask masks away part of the specified IP in '192.168.101.16/16'

Signed-off-by: Mattia Rizzolo <mattia at debian.org>

- - - - -


1 changed file:

- hosts/codethink-sled16-arm64/etc/squid/squid.conf


Changes:

=====================================
hosts/codethink-sled16-arm64/etc/squid/squid.conf
=====================================
@@ -974,7 +974,8 @@
 # should be allowed
 acl localnet src 10.0.0.0/8	# RFC1918 possible internal network
 #acl localnet src 172.16.0.0/12	# RFC1918 possible internal network
-acl localnet src 192.168.101.16/16	# RFC1918 possible internal network
+#acl localnet src 192.168.0.0/16	# RFC1918 possible internal network
+acl localnet src 192.168.101.0/24 # private network between the codethink nodes
 #acl localnet src fc00::/7       # RFC 4193 local private network range
 #acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines
 



View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/commit/daeeb033642df2ad061cf70f28c31d4730fa1a5d

-- 
View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/commit/daeeb033642df2ad061cf70f28c31d4730fa1a5d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/qa-jenkins-scm/attachments/20181009/001594f3/attachment.html>