Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
MIME-Version: 1.0
In-Reply-To: <20111005135703.GB14317@IUPUI.Edu>
References: <4E8B40A3.2010103@CyberTools.biz>
	<4E8B4742.8040409@ice-sa.com>
	<CAG5OYaPO859g0hVPdAOWz4WkZHBrvwMcGFmreb0t2Rsuspdf0Q@mail.gmail.com>
	<4E8B5484.5030203@christopherschultz.net>
	<CAG5OYaNKsOM0g=iK8T4fh18VLmbka8pmEcEXX2=+_h0t3uGqDQ@mail.gmail.com>
	<4E8B59C8.7010006@christopherschultz.net>
	<20111005135703.GB14317@IUPUI.Edu>
Date: Wed, 5 Oct 2011 16:01:44 +0200
Message-ID: 
 <CAG5OYaNPCr-xPgJzfqM4xxUV3HfutsqZMjjrnRmfN1Pd6C=QSQ@mail.gmail.com>
Subject: Re: Denying IPs using the Valve command in context.xml
From: Francis GALIEGUE <fge@one2team.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Wed, Oct 5, 2011 at 15:57, Mark H. Wood <mwood@iupui.edu> wrote:
> Part of the problem with this valve is that regex matching is such a
> (IMHO) bizarre choice for IP address matching. =C2=A0IP addresses have a
> structure which is very unlike text, and the customary and expected
> matches take a bit of finagling to do in regexes.
>
> I should try writing netmask and CIDR address matchers.
>

I'm doing just that at the moment :p

https://issues.apache.org/bugzilla/show_bug.cgi?id=3D51953

> Likewise the hostname valve. =C2=A0Domain names also are structured, and
> people who have just discovered the valve may be expecting quite a
> different type of matching than what they get. =C2=A0I had to read the
> documentation very slowly and carefully before I could get the
> customary match styles out of my head.
>
> Again, I should try writing a DNS-style globber. =C2=A0It might be fun.
> (But don't hold your breath waiting for it.)
>

Ideally, all of Apache's "allow from" and "deny from" (along with
Order while we are at it) could/should be implemented. I'm starting
with the most simple case of all.

It'll be fun to implement, say, 10., .mydomain.com and such...

--=20
Francis Galiegue
ONE2TEAM
Ing=C3=A9nieur syst=C3=A8me
Mob : +33 (0) 683 877 875
Tel : +33 (0) 178 945 552
fge@one2team.com
40 avenue Raymond Poincar=C3=A9
75116 Paris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org