Special Characters for special Attributes

[Leander S.]

Hi,

I use FreeBSD 7.0 and have mpd as PPPoE Server & FreeRADIUS & PGSQL 
succesfully running.

My goal now is it to shrink down the Bandwidth for each user with the 
help of IPFW and Dummynet which is supported by mpd and shouldn't be 
that big of a deal.


That's how my /usr/local/etc/raddb/users  looks like:


###############################################

test    User-Password == "testpasswd"
        Service-Type = Framed-User,
        Framed-Protocol = PPP,
        Framed-IP-Address = 1.2.3.4,
        Framed-IP-Netmask = 255.255.255.255,
        Framed-Routing = Broadcast-Listen,
        Framed-Filter-Id = "std.ppp",
        Framed-MTU = 1492,
        Framed-Compression = Van-Jacobsen-TCP-IP,
        mpd-table += "1=11.1.11.1",
        mpd-table += "1=1.2.3.4",
        mpd-pipe += "1=bw 20Kbyte/s",
        mpd-pipe += "5=bw 10Kbyte/s",
        mpd-rule += "1=pipe %p1 all from any to table\(%t1\) in",
        mpd-rule += "2=pipe %p5 all from table\(%t1\) to any out",
        mpd-rule += "100=allow all from any to any",
[...]

###############################################


The last few lines are responsible for limiting the bandwidth but those 
brackets causing trouble because FreeRADIUS doesn't send it like that to 
mpd5.

-----------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------------
... somebody told me:

IPFW rules are operated using shell+ipfw execution. 
So you should add slashes before shell special chars, like "(" or ")": 
mpd-rule += "1=pipe %p1 all from any to table\(%t1\) in",  
mpd-rule += "2=pipe %p5 all from table\(%t1\) to any out",  
 
PS: you RADIUS configuration syntax may require additional slashing for 
that slashes. :)

[...]

Enable 'log +radius2' in mpd and make sure that rules coming to mpd with 
that slashes added. 
If there will be no slashes, then you RADIUS config strips them and you 
should add slashes for slashes.
-----------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------------

here is a part of mpd5's log to have look how RADIUS sending those 
attributes to mpd5:

###############################################
[...]
[rl0-3] RADIUS: RadiusGetParams: RAD_MPD_RULE: 1=pipe %p1 all from any 
to table\(%t1) in 
[rl0-3] RADIUS: RadiusGetParams: RAD_MPD_RULE: 2=pipe %p5 all from 
table\(%t1) to any out 
[...]
###############################################

^^ ... so you see .. one of that slashes is missed ... BUT how do I get 
those two Lines:
[...]
[rl0-3] RADIUS: RadiusGetParams: RAD_MPD_RULE: 1=pipe %p1 all from any 
to table\(%t1) in 
[rl0-3] RADIUS: RadiusGetParams: RAD_MPD_RULE: 2=pipe %p5 all from 
table\(%t1) to any out 
[...]

looking like they do look in the /usr/local/etc/raddb/users ?

Thank you

Regards,

   Leander