(PM) Emailonly filter

Douglas R. Locke (drlocke@pan-tex.net)
Wed, 20 May 1998 08:48:53 -0500 (CDT)

Wanting to offer an email only service I looked through the archive for
filter info and found a recent one from Feb. Implemented the .in and
.out filters and put a test user in the radius user file.

With the Filter-Id = "emailonly" in the user file I can't get a
successful authentication. If I take the Filter-Id out I can
authenticate but of course no filtering.

Must be missing something in the filter I would suspect. Any suggestions?

emailonly.in
1 permit 0.0.0.0/0 0.0.0.0/0 icmp
2 permit 0.0.0.0/0 0.0.0.0/0 udp dst eq 53
3 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 53
4 permit 0.0.0.0/0 xxx.yyy.zzz.0/24 tcp dst eq 25
5 permit 0.0.0.0/0 xxx.yyy.zzz.0/24 tcp dst eq 110

emailonly.out
1 permit 0.0.0.0/0 0.0.0.0/0 udp dst eq 53
2 permit 0.0.0.0/0 0.0.0.0/0 udp src eq 53
3 permit xxx.yyy.zzz.0/0 0.0.0.0/0 tcp src eq 110 estab
4 permit xxx.yyy.zzz.0/0 0.0.0.0/0 tcp src eq 25 estab
5 permit xxx.yyy.zzz.0/0 0.0.0.0/0 tcp dst eq 25

Radius Users File

testem Password = "test-em"
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
Filter-ID = "emailonly"

Thanks for any suggestions.

Doug
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>