ADMIT reflector behavior

Michael T. Davis (DAVISM@kcgl1.eng.ohio-state.edu)
Fri, 08 Mar 1996 16:56:11 -0500 (EST)


I just obtained the 4.00B3 version of the reflector for Digital UNIX
(formerly OSF/1). I am trying to configure the reflector to only allow
clients within three subnets to connect to it. Here are the ADMIT lines I'm
using (with bogus but consistent IP addresses):

ADMIT 1.2.3:24 Access restricted
//
ADMIT 1.2.4:24 Access restricted
//
ADMIT 1.2.5:24 Reflector access limited to local sites only
//

>From the documentation, I'm interpreting this to mean that anyone with an IP
address of 1.2.3.x, 1.2.4.x, or 1.2.5.x will be permitted access. When I
attempt to connect to the reflector, though, reflect.log spits out the
following:

client not found and packet being dropped due to address or
configuration restrictions

The ADMIT lines are the only real change to the configuration file, over and
above how it's supplied. I guess it would help to know exactly what happens
when the reflector hits an IP mask on an ADMIT line, rather than an IP address
(which is trivial to determine). The client (a Mac running v0.83b3) just
reports "No response from w.x.y.z", where "w.x.y.z" is the IP address of the
system running the reflector. (Specifying the client's IP address explicitly
in reflect.conf works just fine.) Can anyone enlighten me?

Thanks,
Mike

--
  E-mail: davism@KCGL1.eng.ohio-state.edu  | Systems Analyst 1; ECR6, ChE, MSE
            -or- DAVISM+@osu.edu           |Departmental Computing & Networking
  http://kcgl1.eng.ohio-state.edu/~davism/ |     The Ohio State University
 ------------------------------------------------------------------------------