I have in my default section: Ascend-Data-Filter = "ip in forward tcp dstip 2xx.2xx.4x.x/32 dstport = 25", Ascend-Data-Filter = "ip in forward tcp dstip 2xx.2xx.4x.x/32 dstport = 25", Ascend-Data-Filter = "ip in forward tcp dstip 2xx.2xx.4x.xx/32 dstport = 25", Ascend-Data-Filter = "ip in drop tcp dstport = 25", Ascend-Data-Filter = "ip in forward", Ascend-Data-Filter = "ip out drop tcp dstport = 21", Ascend-Data-Filter = "ip out drop tcp dstport = 80", Ascend-Data-Filter = "ip out forward" Worked fin for me for years with Ascend Maxes. On Fri, 11 Nov 2005, Eric Gregory wrote:
Date: Fri, 11 Nov 2005 13:50:07 -0600 From: Eric Gregory <eric@gatewayconnections.net> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: freeradius-users@lists.freeradius.org Subject: Ascend-Data-Filters
I am having an issue that hopefully someone can help with. I am trying to configure my radius server to send liethe following reps Ascend-Data-Filterwhen a user authenticates.
Ascend-Data-Filter = ip in forward tcp est Ascend-Data-Filter = ip in forward dstip xxx.xxx.xxx.4/32 Ascend-Data-Filter = ip in drop tcp dstport = 25 Ascend-Data-Filter = ip in forward
This is for configuration with GlobalPops and I need my users to be able to relay mail through my SMTP server for this to work.
I am using FreeRadius 1.0.4 with the Mysql backend. When I run radcheck I get this info in the reply
Service-Type = Framed-User Framed-IP-Address = 255.255.255.254 Framed-Protocol = PPP Framed-Compression = Van-Jacobson-TCP-IP Framed-IP-Netmask = 255.255.255.255 Session-Timeout = 43200 Idle-Timeout = 1500 Port-Limit = 1 Framed-MTU = 1300 Ascend-Data-Filter = "ip in forward tcp est"
If I wipe out the "ip in forward tcp est" line I get the "ip in forward dstip xxx.xxx.xxx.4/32" line in the reply, if I wipe that out the next comes back but I can't get more than one to come back at me. I have tried applying the filters to the user and to the group which the user is a part of and gotten the same result.
Anyone know what my problem is here. Is there a setting that I have to set to allow it to send multiple instances of the same reply attribute back?
Thanks for any help you can offer.
Eric Gregory - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Bill bbrunton@icu.net http://www.brunton.net http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 The Internet... The place to be!