Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Radius Filter



On Wed, Nov 05, 1997 at 07:30:07PM +0000, Gerd Bohnenstengel wrote:

> does anybody have an working radius filter for
> dening ports ( not only ip based), like http oder telnet.
> 
> I will deny access for ex ip 10.0.0.1 port 80.

The following filter will block Port 80 and enable the rest, at least 
that's the way it worked back when I tested it... :)

[...]
     Ascend-Data-Filter = "ip in drop tcp dstip 0.0.0.0 dstport = 80",
     Ascend-Data-Filter = "ip in forward", 
     Ascend-Data-Filter = "ip out forward",
[...]

-- 
Oliver J. Albrecht <olli@allcon.net>

AllCon GmbH         Lise Meitner Str. 2        D-24941 Flensburg
EMail: allcon@allcon.net     Tel: +49 461 9992-162     Fax: -165
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


References: