Message-ID: <16166104.1182488865683.JavaMail.joeescobar@joe-escobars-computer.local>
Date: Tue, 5 Dec 2006 23:07:54 -0800 (PST)
From: moodleadmin
Subject: Possible solution for secure testing IP address lists
Mime-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_1100_12193317.1182488865683"
GWItemID: 4575995A.LCC-Mail.MC_PO3.100.1346735.1.2647.1

------=_Part_1100_12193317.1182488865683
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


Toni,

If you want to cut down on the number of characters in the IP address lists, the following would handle all of the machines you included in your practice quiz (Toni's Testing > Quiz):

	10.1.0.167,10.9.129.33,10.22.0.142,172.20.33.161/29,172.20.32.15/27

I think the range concept probably didn't work before because you specified the ranges as 172.20.33.161/65 or 172.20.33.161/165 or something like that.  The number after the slash isn't the last address of the range, but is actually a subnet mask, which works very differently.  I entered the range above on your practice quiz on our test server (not production), and it successfully blocked my machine from taking a quiz.  If you like, you could experiment to verify that it works at Florence, et al by putting this in for your test quiz and seeing whether they can access it.

The one caveat is that subnet ranges aren't very granular; by their nature, they specify predefined blocks of addresses, which may include some addresses that you don't want to allow.  The 172.20.33.161/29 range, for example, includes 172.20.33.161 - 172.20.33.167, the second one 172.20.32.0 - 172.20.32.31.  I may be able to work with Thad to make sure that these unwanted IP addresses aren't actually used in Cottage Grove and Florence (so that opening up the range won't be a security breach), but if you're dealing with a large number of different ranges, then this could become a problem.

I'll take a look at expanding the size of the database field for Winter so we aren't so limited in what we can include, but let's also keep in mind that the more we grow this list, the more prone we'll be to typos and such from faculty members.

David


----
David Walton
Web/Moodle administration and identity management
Information Technology
Lane Community College
Email: waltond@lanecc.edu
Voice: 541-463-3367


------=_Part_1100_12193317.1182488865683--