Re: (ASCEND) Port 80

[Lars Marowsky-Bree <lmb@teuto.net>]

On 1999-03-12T18:50:22,
   "Sam Hayes Merritt, III" <harter@feeding.frenzy.com> said:

> > i.e. If I sell a user a mailbox, I do not want that 
> > customer to browse.
> ip in forward tcp dstport = 25
> ip in forward tcp dstport = 110
> generic in drop 0 0 0

You want something more like:

       Ascend-Data-Filter = "ip out forward 6 dstport = 25",
       Ascend-Data-Filter = "ip out forward 6 srcport = 25",
       Ascend-Data-Filter = "ip out forward 6 dstport = 53",
       Ascend-Data-Filter = "ip out forward 6 dstport = 53",
       Ascend-Data-Filter = "ip out forward 17 dstport = 53",
       Ascend-Data-Filter = "ip out forward 17 srcport = 53",
       Ascend-Data-Filter = "ip out forward 6 srcport = 110",
       Ascend-Data-Filter = "ip out forward 6 dstport = 110",
       Ascend-Data-Filter = "ip out drop",

in their profiles. Surely you want them to be able to do DNS too ;-)

Sincerely,
    Lars Marowsky-Brée
	
--
Lars Marowsky-Brée
Network Management

teuto.net Netzdienste GmbH - DPN Verbund-Partner
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>