# databases they can access. Records take one of seven forms:
#
# local DATABASE USER METHOD [OPTION]
-# host DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION]
-# hostssl DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION]
-# hostnossl DATABASE USER IP-ADDRESS IP-MASK METHOD [OPTION]
-# host DATABASE USER IP-ADDRESS/CIDR-MASK METHOD [OPTION]
-# hostssl DATABASE USER IP-ADDRESS/CIDR-MASK METHOD [OPTION]
-# hostnossl DATABASE USER IP-ADDRESS/CIDR-MASK METHOD [OPTION]
+# host DATABASE USER CIDR-ADDRESS METHOD [OPTION]
+# hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
+# hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
+# host DATABASE USER CIDR-ADDRESS METHOD [OPTION]
+# hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
+# hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
#
# (The uppercase quantities should be replaced by actual values.)
# The first field is the connection type: "local" is a Unix-domain socket,
# DATABASE can be "all", "sameuser", "samegroup", a database name (or
# a comma-separated list thereof), or a file name prefixed with "@".
# USER can be "all", an actual user name or a group name prefixed with
-# "+" or a list containing either. IP-ADDRESS and IP-MASK specify the
-# set of hosts the record matches. CIDR-MASK is an integer between 0
-# and 32 (IPv6) or 128(IPv6) inclusive, that specifies the number of
-# significant bits in the mask, so an IPv4 CIDR-MASK of 8 is equivalent
-# to an IP-MASK of 255.0.0.0, and an IPv6 CIDR-MASK of 64 is equivalent
-# to an IP-MASK of ffff:ffff:ffff:ffff::. METHOD can be "trust", "reject",
-# "md5", "crypt", "password", "krb4", "krb5", "ident", or "pam". Note
-# that "password" uses clear-text passwords; "md5" is preferred for
-# encrypted passwords. OPTION is the ident map or the name of the PAM
-# service.
+# "+" or a list containing either.
+#
+# CIDR-ADDRESS specifies the set of hosts the record matches.
+# It is made up of an IP address and a CIDR mask that is an integer
+# between 0 and 32 (IPv6) or 128(IPv6) inclusive, that specifies
+# the number of significant bits in the mask, e.g. an IPv4 CIDR mask
+# of 8 is equivalent to an IP mask of 255.0.0.0, an IPv6 CIDR mask
+# of 64 is equivalent to an IP mask of ffff:ffff:ffff:ffff::. A
+# IPv4 CIDR mask of 32 is used for single hosts. Also, you can use a
+# separate IP address and netmask to specify the set of hosts.
+#
+# METHOD can be "trust", "reject", "md5", "crypt", "password",
+# "krb4", "krb5", "ident", or "pam". Note that "password" uses
+# clear-text passwords; "md5" is preferred for encrypted passwords.
+# OPTION is the ident map or the name of the PAM service.
#
# Database and user names containing spaces, commas, quotes and other special
# characters can be quoted. Quoting one of the keywords "all", "sameuser" or
@authcomment@
-# TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD
+# TYPE DATABASE USER CIDR-ADDRESS METHOD
-local all all @authmethod@
+local all all @authmethod@
# IPv4-style local connections:
-host all all 127.0.0.1/32 @authmethod@
+host all all 127.0.0.1/32 @authmethod@
# IPv6-style local connections:
-host all all ::1/128 @authmethod@
+host all all ::1/128 @authmethod@