Damon.Groenveld@ca.com wrote:
Given that the code (in aclparse.c) calls inet_addr() with the peername.ip parameter, I can't see how it could will work with IPv6.
The only possible workaround is using a regex instead of ip type which by passes the inet_addr() call.
I raised it as a bug since the latest version (as far as I can tell) is meant to support IPv6 and there is no way that peername.ip does and there isn't an alternative.
This is now fixed in HEAD; please test it. Porting this feature to re23 is unlikely, though.
Thanks for reporting. p.