Struct IpFilter 

pub struct IpFilter {
    pub enabled: bool,
    /* private fields */
}

IP address filter supporting both IPv4 and IPv6 ranges.

Flags: 0 = allowed, non-zero = blocked. Local/private network addresses are always exempt from filtering.

Fields

enabled: bool

Master enabled switch — when false, is_blocked short-circuits to false regardless of configured ranges (live bans rebuild semantics).

Plain bool not AtomicBool (per M225 OV F2b): IpFilter carries #[derive(Clone)] and AtomicBool is not Clone. Mutation is safe because the live filter is wrapped in Arc<RwLock<IpFilter>> at the session level; writers take the write lock through apply_settings.

Implementations

impl IpFilter

pub fn new() -> Self

Create a new filter that allows everything.

pub fn add_rule(&mut self, first: IpAddr, last: IpAddr, flags: u32)

Add a rule blocking (or allowing) a range of IP addresses.

Both endpoints must be the same address family (both v4 or both v6). Mixed families are silently ignored.

pub fn access(&self, addr: IpAddr) -> u32

Return the flags for an address. 0 = allowed.

pub fn is_blocked(&self, addr: IpAddr) -> bool

Check if an address is blocked by the filter.

Local/private network addresses (RFC 1918, loopback, link-local) are always exempt and return false even if they fall within a blocked range.

pub fn num_ranges(&self) -> usize

Total number of non-zero-flag ranges across both address families.

pub fn is_empty(&self) -> bool

True if no rules have been added.

Trait Implementations

impl Clone for IpFilter

fn clone(&self) -> IpFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IpFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IpFilter

fn default() -> Self

Returns the “default value” for a type.