There are many different block list formats that the Tixati
IP Filter is compatible with. The lists can be loaded from local files in plain text or .gz format, or loaded online from a URL.
Here are some examples of the accepted formats for ranges and individual IPs:
label:198.51.100.0-198.51.100.255
label:198.51.100.0/24
label:198.51.100.123
198.51.100.0-198.51.100.255,label
198.51.100.123
198.51.100.123:12345 (trailing port number ignored)
198.51.100.123:label
198.51.100.0/24
198.51.100.0/24:label
label:2001:db8:1000::-2001:db8:1fff::
label:[2001:db8:1000::]-[2001:db8:1fff::]
label:[2001:db8:1000::]/35
2001:db8:1000::1b2d
[2001:db8:1000::1b2d]
[2001:db8:1000::1b2d]:12345 (trailing port number ignored)
[2001:db8:1000::1b2d]:label
2001:db8:1000::/35
[2001:db8:1000::]/35
1. Subnets should be specified correctly.
x.x.238.0/23
is a correct subnet specification (even number) and will show 512 IPv4 addresses when loaded, matching x.x.238.0 - x.x.239.255
.
x.x.237.0/23
is an incorrect subnet specification (odd number). The odd bit will be stripped, matching x.x.236.0 - x.x.237.255
. Do not rely on this behavior! Write your subnets correctly. Consider this behavior unstable and 'implementation specific'.
2. (
Fixed in 2.82) If you only have one entry and one line in an IP filter file, it will not be added at all. The file must have a minimum length to be read correctly.