RE: [Nms-cgi-devel] Just a suggestion...

[Wizard <wi...@ne...>]

> you might consider expanding the allow list to be a pattern too so that
> you could deny 195.157.* and allow 195.157.10.*  for instance.

I actually though about that quite a bit, and couldn't think of any
practical situation (at the time) where one would want to deny over 65000
addresses. The only possible situation would be if it was a private board,
in which case you would make it allow/deny. The intent was just to handle
abuse situations, but would still have limitations, such as the abuser being
an AOLer; do you deny all of AOL? That could seriously reduce one's traffic.
I'll think about the scheme some more. Perhaps I could make the
deny/allow-allow/deny user selectable. Or maybe something else ;-)

> Also you
> might want to look at the bit in FormMail.pl that someone did (sorry I
> can't remember who) that allows one to use CIDR notation for acceptable
> referers - it would be nice if we could allow a clueful administrator to
> allow or deny networks at a finer granularity than 2^8 chunks.

I'll take a look as soon as I have some time,
Grant M.