1<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> 2 3<html> 4 <head> 5 <meta name="generator" content="HTML Tidy, see www.w3.org"> 6 <title>Complex Permission Checking</title> 7 <meta name="GENERATOR" content= 8 "Modular DocBook HTML Stylesheet Version 1.7"> 9 <link rel="HOME" title=" LPRng Reference Manual" href= 10 "index.htm"> 11 <link rel="UP" title="Permissions and Authentication " href= 12 "permsref.htm"> 13 <link rel="PREVIOUS" title="Example Permission File" href= 14 "x8919.htm"> 15 <link rel="NEXT" title="More Examples" href="x8947.htm"> 16 </head> 17 18 <body class="SECT1" bgcolor="#FFFFFF" text="#000000" link= 19 "#0000FF" vlink="#840084" alink="#0000FF"> 20 <div class="NAVHEADER"> 21 <table summary="Header navigation table" width="100%" border= 22 "0" cellpadding="0" cellspacing="0"> 23 <tr> 24 <th colspan="3" align="center">LPRng Reference Manual: 5 25 Sep 2003 (For LPRng-3.8.22)</th> 26 </tr> 27 28 <tr> 29 <td width="10%" align="left" valign="bottom"><a href= 30 "x8919.htm" accesskey="P">Prev</a></td> 31 32 <td width="80%" align="center" valign="bottom">Chapter 33 17. Permissions and Authentication</td> 34 35 <td width="10%" align="right" valign="bottom"><a href= 36 "x8947.htm" accesskey="N">Next</a></td> 37 </tr> 38 </table> 39 <hr align="LEFT" width="100%"> 40 </div> 41 42 <div class="SECT1"> 43 <h1 class="SECT1"><a name="AEN8932">17.5. Complex Permission 44 Checking</a></h1> 45 46 <p>One of the more useful types of permission checking is to 47 restrict access to your printers from users outside your 48 networks. The IP pattern can specify a list of IP addresses 49 and netmasks to apply to them.</p> 50 51 <p>For example <var class="LITERAL">IP=10.3.4.0/24</var> 52 would match all hosts with the IP addresses <var class= 53 "LITERAL">IP=10.3.4.0</var> to <var class= 54 "LITERAL">IP=10.3.4.255</var>.</p> 55 56 <p>Similarly, the HOST pattern can specify a set of hostnames 57 or patterns to match against based on the GLOB notation.</p> 58 59 <p>For example <var class= 60 "LITERAL">REMOTEHOST=*.private</var> would match all hosts 61 with a DNS entry which ended with <tt class= 62 "FILENAME">private</tt>.</p> 63 64 <p>The NOT keyword reverses the match sense. For example <var 65 class="LITERAL">REJECT NOT 66 REMOTEHOST=*.private,*.murphy.com</var> would reject all 67 requests from hosts which did not have a DNS entry ending in 68 <tt class="FILENAME">private</tt> or <tt class= 69 "FILENAME">murphy.com</tt>.</p> 70 </div> 71 72 <div class="NAVFOOTER"> 73 <hr align="LEFT" width="100%"> 74 75 <table summary="Footer navigation table" width="100%" border= 76 "0" cellpadding="0" cellspacing="0"> 77 <tr> 78 <td width="33%" align="left" valign="top"><a href= 79 "x8919.htm" accesskey="P">Prev</a></td> 80 81 <td width="34%" align="center" valign="top"><a href= 82 "index.htm" accesskey="H">Home</a></td> 83 84 <td width="33%" align="right" valign="top"><a href= 85 "x8947.htm" accesskey="N">Next</a></td> 86 </tr> 87 88 <tr> 89 <td width="33%" align="left" valign="top">Example 90 Permission File</td> 91 92 <td width="34%" align="center" valign="top"><a href= 93 "permsref.htm" accesskey="U">Up</a></td> 94 95 <td width="33%" align="right" valign="top">More 96 Examples</td> 97 </tr> 98 </table> 99 </div> 100 </body> 101</html> 102 103