3.13.2 Notes
-
No format checking is performed on this definition file.
-
If there is no definition file, connection is permitted from all hosts.
-
If there is a definition file but it does not contain any valid definitions, connection requests from all hosts are rejected.
-
A connection request from a host that is not specified in the definition file is rejected.
-
The definitions under [deny_list] take precedence over the definitions under [allow_list]. For this reason, a connection request from a host that is specified in both [allow_list] and [deny_list] is rejected.
-
When a connection is rejected, the control connection is lost, in which case no response message is sent immediately after control connection is established.
-
When specifying an IPv6 address, specify a mask value in the format address-portion/xx (where xx is a decimal number between 1 and 128).
-
Specified IPv6 addresses that have a scope ID (with the % character specified) are invalid.