Re: Proposed Changes in EPICS Base, PCAS and ca-gateway: Ignore IPs by environment / check IPs in access security

["J. Lewis Muir via Core-talk" <core-talk@aps.anl.gov>]

On 12/06, Goetz Pfeiffer via Core-talk wrote:
> I would like to hear your comments and suggestions regarding this topic.
> 
> The changes consist of three parts:
> 
> - Define networks to be ignored by servers with environment variable
>   EPICS_CAS_IGNORE_NET_LIST

What about just using EPICS_CAS_IGNORE_ADDR_LIST but extending its
syntax to allow specifying networks (e.g., 192.168.12.0/24)?  Or you
could extend the syntax to allow specifying a range with a ".." literal
(e.g., 192.168.12.0..255)?

It seems a bit weird to have two separate variables: one for addresses
and one for networks.  You're still trying to specify a list of
addresses, you're just wanting to introduce the ability to specify a
range of addresses in a short form.

> - Define networks to be ignored by clients with environment variable
>   EPICS_CA_IGNORE_NET_LIST

Similar comment here as above.  What about just adding
EPICS_CA_IGNORE_ADDR_LIST instead, and using it like
EPICS_CAS_IGNORE_ADDR_LIST?

Lewis