AFSLore/IPAccessControl.mdwn

   1 ## <a name="Controlling AFS Access using IP"></a><a name="Controlling AFS Access using IP "></a> Controlling AFS Access using IP Addresses.
   2
   3 A common mistake is to put the IP address directly on a directory's ACL. As is explained in this [thread](https://lists.openafs.org/pipermail/openafs-info/2002-February/003292.html), that doesn't work. You need to create a group and put the IP addresses in there.
   4
   5 The user should be warned that IP addresses can be spoofed relatively easily.
   6
   7 See also [http://www.transarc.ibm.com/Support/afs/admin/IP\_acls.html](http://www.transarc.ibm.com/Support/afs/admin/IP_acls.html)
   8
   9 -- [[TedAnderson]] - 07 Feb 2002
  10
  11 From Joseph H Vilas &lt; <jhv@duke.edu> &gt; to [OpenAFS](https://www.openafs.org/pipermail/openafs-info/2003-February/008151.html) on 25-Feb-2003:
  12
  13 I got tired of figuring this out and explaining it, so I wrote:
  14
  15 <http://www.duke.edu/~jhv/answers/afs-ip-acls.html>
  16
  17 As Ruby pointed out, it's not so secure as it could be, but it may be adequate for some applications.
  18
  19 BTW, I'd appreciate any feedback on the document folks might have.
  20
  21 Joe
  22
  23 -- [[TedAnderson]] - 26 Feb 2003
  24
  25 IP-based ACL or ACLs is a common term for this. Hopefully this note makes the wiki search find this page for the next person who is looking.
  26
  27 -- [[DanPritts]] - 21 Oct 2003
  28
  29 [http://www.hengda-nb.com 甲缩醛] [http://www.hengda-nb.com 氯甲烷] [http://tuantibaoxian.shop263.com 团体保险] [http://shbaoxian.shop263.com 上海保险] [http://1baoxian.shop263.com 保险] [http://shpa18.shop263.com 上海平安保险公司] [http://shenji.shop263.com 审计] [http://shuiwu.shop263.com 税务] [http://zhanshitai.shop263.com 展示台] [http://fengmuji.shop263.com 风幕机] [http://www.blogbus.com/blogbus/blog/diary.php?diaryid=576865 blog] [http://asp.7i24.com/qh505/blog2/more.asp?name=bodazhang&amp;id=53 blog] [http://www.yourblog.org/Data/20051/207360.html blog] [http://seo263.blogchina.com/ blog] [http://basics.sjtu.edu.cn/blog/summary.php blog] [http://bbs.dprktime.com/blog.asp?name=bodazhang blog] [http://blog.china-pub.com/more.asp?name=bodazhang&amp;id=7016 blog] [http://blog.aspcool.com/bodazhang/archive/2005/01/16/1710.html blog] [http://blog.haiguinet.com/more.asp?name=bodazhang&amp;id=117 blog] [http://blog.itpub.net/bodazhang blog] [http://blog.netandtv.com/blog/blog.asp?name=bodazhang blog] [http://blog.qlsh.net/more.asp?name=boda&amp;id=1110 blog] [http://blog.soufun.com/blog/bodazhang/ blog] [http://www.ucblog.com/more.asp?name=boda1&amp;id=7516 blog] [http://blog.zhinet.com/blog.asp?name=bodazhang blog] [http://hk.netsh.com/eden/blog/ctl\_eden\_blog.php?iBlogID=1098686 blog] [http://riji.163.com/weblog/comment/1boda/null/375063 blog] [http://wen.ccp.org.cn/modules.php?name=Journal&amp;file=display&amp;jid=23 blog] [http://www.52blog.net/more.asp?name=bodazhang&amp;id=104769 blog] [http://www.70blog.com/blog.asp?name=bodazhang blog] [http://www.eedu.org.cn/blog/more.asp?name=bodazhang&amp;id=919 blog] [http://www.blog.sh/more.asp?name=bodazhang&amp;id=4312 blog] [http://www.blog8748.com/blog/more.asp?name=bodazhang&amp;id=2356 blog] [http://www.blogerhome.com/more.asp?name=bodazhang&amp;id=5317 blog] [http://www.visa.org.cn/blog/more.asp?id=351 blog] [http://blog.lawoy.com/bodazhang blog] [http://www.donews.net/boda/archive/2005/01/16/242661.aspx blog] [http://blog.xinanhui.com/more.asp?name=bodazhang&amp;id=2018 blog] [http://www.ins.com.cn/blog/blog.asp?name=bodazhang blog] [http://www.kmcenter.org/blog/more.asp?name=bodazhang&amp;id=794 blog] [http://218.78.246.60/yuwenonline/blog/more.asp?name=bodazhang&amp;id=189 blog] [http://www.oioj.net/blog/more.asp?name=bodazhang&amp;id=26755 blog] [http://blog.ourmm.com/more.asp?name=boda&amp;id=1469 blog] [http://www.tanqiu.com/blog/blog.asp?lid=4328 blog] [http://www.upda.cn/modules/weblog/details.php?blog\_id=286 blog] [http://www.vi21.net/blog/more.asp?name=bodazhang&amp;id=413 blog] [http://www.wuyouschool.com.cn/blog/more.asp?name=bodazhang&amp;id=245 blog] [http://blog.116.com.cn/index.php?blogId=9797 blog] [http://www.cndazhou.net/oblog/more.asp?name=bodazhang&amp;id=206 blog] [http://www.wenxue.com/T3/?q=node/4140 blog] [http://dili.wjstar.net/blog/more.asp?name=bodazhang&amp;id=1544 blog] [http://www.eedu.org.cn/blog/more.asp?name=bodazhang&amp;id=919 blog] [http://www.blogcn.com/user26/bodazhang/index.html blog] [http://herald.seu.edu.cn/blog/bodazhang blog] [http://www.blogcn.com/user26/bodazhang/index.html blog] [http://bodajishu.bloglong.com/BlogCollection/MyBlog.aspx blog] [http://www.zjut.com/blog/blog.asp?name=boda1 blog] [http://boda1.yculblog.com/ blog] [http://boda1.blogcup.com/read\_boda1\_24377.html blog]