Ascend-Data-Filters

[Bill Brunton]

I have in my default section:


        Ascend-Data-Filter = "ip in forward tcp dstip 2xx.2xx.4x.x/32 
dstport = 25",
        Ascend-Data-Filter = "ip in forward tcp dstip 2xx.2xx.4x.x/32 
dstport = 25",
        Ascend-Data-Filter = "ip in forward tcp dstip 2xx.2xx.4x.xx/32 
dstport = 25",
        Ascend-Data-Filter = "ip in drop tcp dstport = 25",
        Ascend-Data-Filter = "ip in forward",
        Ascend-Data-Filter = "ip out drop tcp dstport = 21",
        Ascend-Data-Filter = "ip out drop tcp dstport = 80",
        Ascend-Data-Filter = "ip out forward"
 
Worked fin for me for years with Ascend Maxes.



On Fri, 11 Nov 2005, Eric Gregory wrote:

> Date: Fri, 11 Nov 2005 13:50:07 -0600
> From: Eric Gregory <eric at gatewayconnections.net>
> Reply-To: FreeRadius users mailing list
>     <freeradius-users at lists.freeradius.org>
> To: freeradius-users at lists.freeradius.org
> Subject: Ascend-Data-Filters
> 
> I am having an issue that hopefully someone can help with.  I am trying 
> to configure my radius server to send liethe following reps 
> Ascend-Data-Filterwhen a user authenticates. 
> 
> 	Ascend-Data-Filter = ip in forward tcp est
> 	Ascend-Data-Filter = ip in forward dstip xxx.xxx.xxx.4/32
> 	Ascend-Data-Filter = ip in drop tcp dstport = 25
> 	Ascend-Data-Filter = ip in forward
> 
> This is for configuration with GlobalPops and I need my users to be able to relay mail through my SMTP server for this to work.
> 
> I am using FreeRadius 1.0.4 with the Mysql backend.  When I run radcheck I get this info in the reply
> 
> 
>         Service-Type = Framed-User
>         Framed-IP-Address = 255.255.255.254
>         Framed-Protocol = PPP
>         Framed-Compression = Van-Jacobson-TCP-IP
>         Framed-IP-Netmask = 255.255.255.255
>         Session-Timeout = 43200
>         Idle-Timeout = 1500
>         Port-Limit = 1
>         Framed-MTU = 1300
>         Ascend-Data-Filter = "ip in forward tcp est"
> 
> If I wipe out the "ip in forward tcp est" line I get the "ip in forward 
> dstip xxx.xxx.xxx.4/32" line in the reply, if I wipe that out the next 
> comes back but I can't get more than one to come back at me.  I have 
> tried applying the filters to the user and to the group which the user 
> is a part of and gotten the same result. 
> 
> Anyone know what my problem is here.  Is there a setting that I have to 
> set to allow it to send multiple instances of the same reply attribute back?
> 
> Thanks for any help you can offer.
> 
> Eric Gregory
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 

-- 
Bill
bbrunton at icu.net
http://www.brunton.net
http://www.icu.net
KA0SEP NNN0HQA/OK
ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500

The Internet... The place to be!