Matching IP addresses

Alan DeKok aland at deployingradius.com
Wed Dec 6 17:05:40 CET 2017


On Dec 6, 2017, at 9:56 AM, Stefan Winter <stefan.winter at restena.lu> wrote:
> I find the lack of mathematical correctness of this operator disturbing.

  I spent a long time doing math and set theory.  You're not wrong.

> The RHS is a set, and the LHS is either an element contained in this set
> or not.

  Yes.

> If only the config files were UTF-8, then the operator to use would be
> "ELEMENT OF", U+2208, ∈.

  The config files are UTF-8.

  Feel free to send a patch allowing this. :)

  But until there's an easy way to enter unicode characters on all operating systems, overloading "<" and ">" is terrible, but useful.

  If we wanted to go the Perl route, we would just add all kinds of special operators with magic characters.  Or, just use text:

	if (Framed-IP-Address IN 192.0.2.0/24) 

  But internally, that would likely just map to "<".

  Alan DeKok.




More information about the Freeradius-Users mailing list