Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Need Filter-Entry



On Tue, Jan 13, 1998 at 08:25:15PM -0500, Joe Pautler wrote:
> Stefan M. Brandl wrote:
> ]
> ]I need a radius filter entry that allows smtp-connections only to one
> ]single host. Connections to any other host on port 25 should be denied.
> ]Connectoins on all other ports should be allowed to any host.
> ]
> ]Can anyone give me an example-entry?
> 
> So, you want to hand the filter off as part of the radius profile,
> and you want the machine/user receiving the profile to only be
> able to connect to the smtp port on a single machine, right?
> 
>      Ascend-Data-Filter = "ip in forward dstip 1.2.3.4/32 tcp dstport = 25",
>      Ascend-Data-Filter = "ip in drop tcp dstport = 25",
>      Ascend-Data-Filter = "ip in forward 0 0 0",
> 

OK, thats it.
This one works perfect.


Thanks
   Stefan
-- 
"Just go ahead and write your own             |   Passauer Neue Medien GmbH
 multitasking multiuser os !                  |   Medienstrasse 5
 Worked for me all the times."                |   94036 Passau
                           -- Linus Torvalds  |   http://www.pnm.net
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


Follow-Ups: References: