Re: (PM) Avalanche! Help!

Doug Ingraham (dpi@rapidnet.com)
Sun, 25 Jan 1998 10:52:23 -0700 (MST)

On Sun, 25 Jan 1998, Doug Ingraham wrote:

> done. The router was congested as well. The following filter solved the
> problem.
>
> add filter e.out
> set filter e.out 1 permit 192.168.1.32/27
> set filter e.out 2 permit 192.168.0.10/32
> set filter e.out 3 permit log
>
> 192.168.1.32/27 is the assigned address pool in that portmaster.
> 102.168.0.10/32 is the address of that portmaster's ethernet.

I forgot to mention that you need to apply the filter to the interface.

set ether0 ofilter e.out
save all

I also should mention that a filter like this is especially important on
your wan connections. It is so easy to congest a 56K or even a T-1 with
routing loops. Think of it this way, if you can congest a 10mbps ethernet
with routing loops, it is 3 times easier for a T-1 and about 90 times
easier on a 56K.

Doug Ingraham From the Ferengi Rules of Acquisition.
Rapid City, SD #34 "Peace is good for business."
USA #35 "War is good for business."

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.