ip bans: allow full bans to overlap partial bans.
Allow full banning an IP that is part of a subnet that has already been partially banned.
This commit is contained in:
@@ -71,7 +71,7 @@ class IpBan < ApplicationRecord
|
||||
errors.add(:ip_addr, "may not have a subnet bigger than /64")
|
||||
elsif partial_ban? && ip_addr.ipv6? && ip_addr.prefix < 20
|
||||
errors.add(:ip_addr, "may not have a subnet bigger than /20")
|
||||
elsif new_record? && IpBan.active.ip_matches(subnetted_ip).exists?
|
||||
elsif new_record? && IpBan.active.where(category: category).ip_matches(subnetted_ip).exists?
|
||||
errors.add(:ip_addr, "is already banned")
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user