[ratelimits] exempt-clients and ACLs

Vernon Schryver vjs at rhyolite.com
Mon Aug 6 13:37:26 UTC 2012


> From: Tony Finch <dot at dotat.at>

> Do I gather correctly that the exempt-clients option doesn't allow you to
> use named ACLs in the address_match_list? I tried using the predefined
> localhost ACL which did not work, though writing the addresses in full did
> work.

It seems to work for me.  It uses the same mechanism that is used
by other cases where ACLs can be used including view{} statements.

Did you remember to following this restriction in the ARM:

    Note that an address match list's name must be defined with acl
    before it can be used elsewhere; no forward references are
    allowed.

Did you install the new version of named-checkconf?


Vernon Schryver    vjs at rhyolite.com


More information about the ratelimits mailing list