]> git.saurik.com Git - apple/network_cmds.git/blob - ypserv.tproj/ypserv.acl
network_cmds-245.1.3.tar.gz
[apple/network_cmds.git] / ypserv.tproj / ypserv.acl
1 # This is an example of an access control file to be used by ypserv.
2 #
3 # This file is parsed line by line. First match will terminate the check
4 # of the caller.
5 #
6
7 #############################################################################
8 # This is the commands that will match a single host
9 #
10 # allow host <hostname|ip-address>
11 # deny host <hostname|ip-address>
12 #
13 # To process hostname gethostbyname is called. If the hostname has multiple
14 # ip-addresses all will be added (I hope). ip-address is processed by
15 # inet_aton.
16 allow host localhost
17 deny host jodie
18
19 #############################################################################
20 # This is the commands that will match a network
21 #
22 # allow net <netname|netnumber> [netmask <netname|netnumber>]
23 # deny net <netname|netnumber> [netmask <netname|netnumber>]
24 #
25 # To process netname getnetbyname is called, and inet_aton is used for
26 # netnumber. inet_aton both access numbers as 255.255.255.0 and 0xffffff00.
27 #
28 # If netmask isn't given the parser will assume netmask from the first bits
29 # of the network number. So if the network is subneted the you have to add
30 # the netmask. In my case I've got the network 139.58.253.0 at home so too
31 # allow any of my computers to talk with the server I need the following line
32 #
33 allow net mojathome netmask 255.255.255.0
34
35 #############################################################################
36 # At last we have a command that will match any caller:
37 #
38 # allow all
39 # deny all
40 #
41
42 # reject all connections
43 deny all
44