Re: (ASCEND) dialout and callback

["Oliver J. Albrecht" <oj@nexus.flensbone.net>]

Hi,

In article <542df7fdaae1@news.allcon.net> you wrote:

>The SMTP filter caught my eye. What are you doing, exactly?

>I ask because we do Dial-up SMTP (ETRN, RFC 1985), and we also offer
>Dial-on-Demand ISDN where we'll initiate a call and get CLID callback.

Basically we initiate a call for (only) smtp traffic to the client and 
wait for a CLID callback which is authenticated against a different
radius profile without call filters. We use this setup for several customers 
who want their internal smtp hosts to receive mail directly. 

>Both those things work fine, but not together. SMT bound for the client
>will bring the link up. I toyed with call filtering SMTP so it wouldn't
>bring the link up, but the trouble is that then it won't _keep_ the link up
>either, so it could timeout in a mail transfer. Or...?

Since the -out profile only initiates the call, the call filters used in
that profile won't affect the callback connection at all. At least it doesn't 
happen if there are seperate radius profiles for dialout and dialin.
Thus the callback connection uses the client-side calls filters, if any.

>I'd like to prevent SMTP from going directly to an SMTP server on a dialup
>link, but allow the client to get mail from my server using ETRN. Do you
>have this working?

Not in exactly this way, no. But if I understand your requirement, a
-out profile that allows ip traffic except smtp will do the job. Once
the client calls back (authenticating against a different and filterless 
profile), all call-filters are up to the client and in your case would allow 
the ETRN-triggered smtp traffic to reset the idle-timer.

Hope I understood what you meant... :)

-- 
Oliver J. Albrecht <oj@nexus.flensbone.net>
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>