From: Björn Jacke Date: Fri, 15 Oct 2021 14:32:15 +0000 (+0200) Subject: MINOR: add ::1 to predefined LOCALHOST acl X-Git-Tag: v2.5-dev11~46 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=20d0f50b003920ebe6db4b70d02183196dbb9796;p=thirdparty%2Fhaproxy.git MINOR: add ::1 to predefined LOCALHOST acl The "LOCALHOST" ACL currently matches only 127.0.0.1/8. This adds the IPv6 "::1" address to the supported patterns. --- diff --git a/doc/configuration.txt b/doc/configuration.txt index db6656c7d2..b0a79bfb4d 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -20557,7 +20557,7 @@ HTTP_CONTENT req.hdr_val(content-length) gt 0 match an existing content-le HTTP_URL_ABS url_reg ^[^/:]*:// match absolute URL with scheme HTTP_URL_SLASH url_beg / match URL beginning with "/" HTTP_URL_STAR url * match URL equal to "*" -LOCALHOST src 127.0.0.1/8 match connection from local host +LOCALHOST src 127.0.0.1/8 ::1 match connection from local host METH_CONNECT method CONNECT match HTTP CONNECT method METH_DELETE method DELETE match HTTP DELETE method METH_GET method GET HEAD match HTTP GET or HEAD method diff --git a/src/acl.c b/src/acl.c index 6d11a0b35e..480dd11a8c 100644 --- a/src/acl.c +++ b/src/acl.c @@ -754,7 +754,7 @@ const struct { } default_acl_list[] = { { .name = "TRUE", .expr = {"always_true",""}}, { .name = "FALSE", .expr = {"always_false",""}}, - { .name = "LOCALHOST", .expr = {"src","127.0.0.1/8",""}}, + { .name = "LOCALHOST", .expr = {"src","127.0.0.1/8","::1",""}}, { .name = "HTTP", .expr = {"req.proto_http",""}}, { .name = "HTTP_1.0", .expr = {"req.ver","1.0",""}}, { .name = "HTTP_1.1", .expr = {"req.ver","1.1",""}},