jathanism / acl

Network access control list and firewall policy parsing library.
Other
24 stars 23 forks source link

check_access needs to normalize source-address of "any" #7

Open jathanism opened 11 years ago

jathanism commented 11 years ago

When passing "any" to check_access it is converted to an empty list ([]) that is equivalent to Cisco's "any" or Juniper's null "source-address" block, which equates to "any source" when performing an access test.

Source addresses passed along such as "0.0.0.0" or "0.0.0./0" need to also be properly normalized to "any" (or []) in this context). This should be something that is standard throughout the Trigger ACL libraries.