On Wed, 10 Nov 2004, Dale Worley wrote:
> I was thinking that it would be better to test "IP-addr-of(A) =
> IP-addr-of(A.B.C)", which is more likely to work, since people often do not
> have reverse DNS working.
>
> But that is not safe either, given that a single real host can host multiple
> apparent Subversion HTTP servers -- HTTP/1.1 allows one server to use one IP
> address, but serve several HTTP host names with possibly overlapping file
> names.
Another reason this won't work is that the same machine can be accessible
from different IP addresses to the same server.
For instance to get to my resporitory:
On my server, I do svn checkout svn://localhost/foo
On my intranet, I do svn checkout svn://192.168.1.1/foo
On "the internets", I do svn checkout svn://thekramers.net/foo
Three different IP addresses, same machine, same server.
I wouldn't really use 192.168.1.1, I would use the machine name, I
just wanted to make the point that it would be coming in on the intranet
ethernet port, not the internet ethernet port.
If I tried to do svn://thekramers.net/foo from inside my intranet, it
would time out because my firewall blocks packets going out and back in
again. I could hack the /etc/hosts on each machine to define the domain
names to 192.168.1.1, but that's a bigger admin hassle.
----------------------------------------------------------------------------
DDDD David Kramer david_at_thekramers.net http://thekramers.net
DK KD Some people have told me they don't think a fat penguin really
DKK D embodies the grace of Linux, which just tells me they have never seen
DK KD an angry penguin charging at them in excess of 100mph. They'd be a
DDDD lot more careful about what they say if they had. Linus Torvalds
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Nov 12 21:10:51 2004