Nginx Allow Deny Block Mix Ipv4 and Ipv6

team_traitor

I don't know what to do now.
Need help. This the first time I encountered this.

listen 443 ssl;
listen [::]:443 ssl;
include snippets/subdomain.example.tld.conf;

    root /srv/tools/phpMyAdmin-5.0.4-all-languages;
    index index.php;

    server_name subdomain.example.tld;


    location / {
     
     allow 2001:XX:XX-----;
     # allow [2001:XX:XX-----]; // error
     allow xx.xx.xxx.xx;
     deny all;
     try_files $uri $uri/ =404;
    }

When I tried this I always get the 403 (Forbidden error from nginx);

What is the proper way to allow a mix of Ipv4 and Ipv6?
Thanks for the help in advance.

LES

http://nginx.org/en/docs/http/ngx_http_access_module.html

team_traitor

@LES said:
http://nginx.org/en/docs/http/ngx_http_access_module.html

not working. I tried that before I posted here.

[warn] low address bits of 2001:67c:2628:647:12::/32 are meaningless in /etc/nginx/conf.d/

tcp        0      0 localhost:mysql         0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:http            0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:https           0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:5372            0.0.0.0:*               LISTEN     
tcp6       0      0 [::]:http               [::]:*                  LISTEN     
tcp6       0      0 [::]:https              [::]:*                  LISTEN     
tcp6       0      0 [::]:5372               [::]:*                  LISTEN    

kerus1024

2001

team_traitor

@kerus1024 said:
2001:67c:2628:647:12::/32 allow 2001:67c:2628:647:12::/80

not working too. but the syntax is okay according to nginx.
Still I get a 403 Forbidden. :-(

LES

Is this IP from your home ISP?

team_traitor

It turns that there is a problem with Ipv6 on my vps.
I get a this message when I ping Ipv6 enable website inside my box.

debian@vps-xxxx:~$ ping6 ipv6.google.com
connect: Network is unreachable
debian@vps-xxxx:~$ 

I use the opera vpn (which gives Ipv6 as a test).
I don't have much time to spare so I figure this out next time. Thanks for the help guys. LET never let me down.