<div dir="ltr">While waiting for the upstream netaddr feedback, we should be able to block this pretty easily on the Neutron side by just checking that "str(netaddr.IPNetwork(input)) == input".</div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Aug 22, 2015 at 12:31 PM, Sean M. Collins <span dir="ltr"><<a href="mailto:sean@coreitpro.com" target="_blank">sean@coreitpro.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="gmail_quote"><span class="">On August 22, 2015 11:58:03 AM EDT, Monty Taylor <<a href="mailto:mordred@inaugust.com" target="_blank">mordred@inaugust.com</a>> wrote:</span><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<pre><span class="">On 08/21/2015 03:33 PM, Jay Pipes wrote:<br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> On 08/21/2015 02:34 PM, Sean M. Collins wrote:<br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> So - the tl;dr is that I don't think that we should accept inputs like<br> the following:<br><br> x -> 192<br> x/y -> 10/8<br> x.x/y -> 192.168/16<br> x.x.x/y -> 192.168.0/24<br><br> which are equivalent to::<br><br> x.0.0.0/y -> <a href="http://192.0.0.0/24" target="_blank">192.0.0.0/24</a><br> x.0.0.0/y -> <a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a><br> x.x.0.0/y -> <a href="http://192.168.0.0/16" target="_blank">192.168.0.0/16</a><br> x.x.x.0/y -> <a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a><br></blockquote> <br> Agreed completely.<br></blockquote><br>++<br><br><br><hr><br></span><span class="">OpenStack Development Mailing List (not for usage questions)<br>Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br></span></pre></blockquote></div><br clear="all">I've got a proof of concept patch for netaddr, I'll be reaching out to the netaddr devs and use it to spur discussion.<br>
<br>
<a href="https://github.com/sc68cal/netaddr/commit/7ccbfe40fe6be66228601977ded74781cf5cffd9" target="_blank">https://github.com/sc68cal/netaddr/commit/7ccbfe40fe6be66228601977ded74781cf5cffd9</a><span class="HOEnZb"><font color="#888888"><br>
<br>
<br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</font></span></div><br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div>Kevin Benton</div></div>
</div>