(PM) PM2e, features and filters (fwd)

MegaZone (megazone@megazone.org)
Wed, 10 Jun 1998 10:23:01 -0700 (PDT)

Once upon a time Josh Moormann shaped the electrons to say...
>- Can I setup a filter to only allow communications to a specific port and
>IP address of the SIS

This part - yes, easily.

>and apply it to a specific modem port (the ports which
>match up to the SIS dialup number), so that no matter what user logs in from
>any of the modems, the only place they can talk to is the SIS.

This part - not so easy. For dialin users filters are applied PER USER.
So any filter applied to a PORT used for dialin is IGNORED. There is a way
around this, in that RADIUS knows the port being used and you can use profiles
in RADIUS for that port to apply the filter.

>- Can a filter be created and applied to a group of users, so that only the
>users which the filter is applied to can continue to communicate via that
>modem/port? The only thing anybody else could do is just tie up the modem,
>all other packets would be automatically blocked. Is this a RADIUS issue?

Sure - but why? RADIUS can block users from using specific ports, so they
can't even tie up the modem. They simply can't use that port.

-MZ

-- 
<URL:mailto:megazone@megazone.org> Gweep, author, webmaster, human being, me
"A little nonsense now and then, is relished by the wisest men" 781-788-0130
<URL:mailto:megazone@gweep.net> <URL:http://www.megazone.org/> Hail Discordia!
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>