Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) Radius Filter
On Wed, Nov 05, 1997 at 07:30:07PM +0000, Gerd Bohnenstengel wrote:
> does anybody have an working radius filter for
> dening ports ( not only ip based), like http oder telnet.
> 
> I will deny access for ex ip 10.0.0.1 port 80.
The following filter will block Port 80 and enable the rest, at least 
that's the way it worked back when I tested it... :)
[...]
     Ascend-Data-Filter = "ip in drop tcp dstip 0.0.0.0 dstport = 80",
     Ascend-Data-Filter = "ip in forward", 
     Ascend-Data-Filter = "ip out forward",
[...]
-- 
Oliver J. Albrecht <olli@allcon.net>
AllCon GmbH         Lise Meitner Str. 2        D-24941 Flensburg
EMail: allcon@allcon.net     Tel: +49 461 9992-162     Fax: -165
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
References: