Project

General

Profile

Bug #4044

Access Entries ip/mask bug

Added by Alexander Balabanov about 8 years ago. Updated almost 8 years ago.

Status:
Fixed
Priority:
Normal
Assignee:
-
Category:
General
Target version:
-
Start date:
2016-10-26
Due date:
% Done:

100%

Estimated time:
Found in version:
4.1-2300
Affected Versions:

Description

Hi!
There is a problem - in access entries i have next entries: * * 192.168.0.0/24 with access to channels with tags "freetv" * * 192.168.0.4/32 with full access (for all channels)

in vlc with ip 192.168.0.4 i see only "freetv" channels.
changing order in access entries doesn't give any effect :(

i think, that wider mask (/24) overlap my single ip (/32), but this logic is wrong!

History

#1

Updated by Dominik W about 8 years ago

Omg...

check your Subnetting, which is anything but correct.

#2

Updated by saen acro about 8 years ago

There is not /32 mask,
because there will not be address space for second ip,
aka will have access only to localhost.
https://www.aelius.com/njh/subnet_sheet.html

#3

Updated by Alexander Balabanov about 8 years ago

saen acro wrote:

There is not /32 mask,
because there will not be address space for second ip,
aka will have access only to localhost.
https://www.aelius.com/njh/subnet_sheet.html

hm-m-m... second ip? what second ip? i need to give full access to concrete ip.
192.168.0.4 - is not ip, where tvheadend installed, 192.168.0.4 - vlc-client.
and yes, /32 - this is mask of subnet for single ip. :)

i guess that access entries should be work as simple routing - a smaller subnet mask takes precedence over the wider mask.
accordingly single ip should be a higher priority than the full subnet.

#4

Updated by Jaroslav Kysela about 8 years ago

The problem is that the channel tags are merged from multiple matched ACL entries and they are NEVER reset (to allow all tags) - I see that it's logically wrong.

#5

Updated by Alexander Balabanov about 8 years ago

Jaroslav Kysela wrote:

The problem is that the channel tags are merged from multiple matched ACL entries and they are NEVER reset (to allow all tags) - I see that it's logically wrong.

and how can I solve my problem? create 252 access entries with "freetv" ips and one with full list of channels? :)

#6

Updated by Alexander Balabanov almost 8 years ago

any ideas?

#7

Updated by Jaroslav Kysela almost 8 years ago

  • Status changed from New to Fixed
  • % Done changed from 0 to 100

Applied in changeset commit:tvheadend|cb10625ec743c14f85b75bf10e2f9873cc8a9e30.

#8

Updated by Jaroslav Kysela almost 8 years ago

Fixed in v4.1-2381-gcb10625 . You may control now what parameters are set / merged and if you set the 'parameter change flag' and leave the parameter empty (or unset), it's cleared now. The order of entries is important. Put your IP specific settings to the bottom of the grid.

Also available in: Atom PDF