Re: (PM) Dialup ISDN w/ORU Problems

Rick Smith (rsmith@nac.net)
Mon, 15 Jun 1998 11:17:51 -0400 (EDT)

here we go.
I used Jason Marshall's filters (posted earlier) to do
a ptrace and found two things. There was a machine on the
local net on their side doing udp broadcasts to find a
bootp server to 255.255.255.255 on ports 67/68. Also,
this customer has a partial subnet, a /28 I think, and
when netbios broadcasts, it uses xxx.xxx.xxx.255 to do so!
How stupid. So of course, that's not on the local net, so
the oru dials out to find it. As soon as I put this in,
the dialing out ended and we ended up with a happy customer.

BTW... Megazone... your in.pmd / portmaster service idea
was not the solution. I tried that first. ;)

add filter eout
set filter eout 1 deny 0.0.0.0/0 0.0.0.0/0 udp dst eq 137
set filter eout 2 deny 0.0.0.0/0 0.0.0.0/0 udp dst eq 138
set filter eout 3 deny 0.0.0.0/0 0.0.0.0/0 udp dst eq 139
set filter eout 4 deny 0.0.0.0/0 0.0.0.0/0 udp dst eq 67
set filter eout 5 deny 0.0.0.0/0 0.0.0.0/0 udp dst eq 68
set filter eout 6 permit 0.0.0.0/0 0.0.0.0/0 ip
save filter
set ether0 ifilter eout
save all

no reboot necessary, just reset the dialout S#'s

On Mon, 15 Jun 1998, Jake Messinger wrote:
> On Sat, 13 Jun 1998, Rick Smith wrote:
>
> > I've been told by Lucent tech support to remove all dns
> > settings from the router, remove loghost settings, turn
> > off rip, etc. All done, still happening. This user had
>
> I did this too, but we still have customer units that dial right back in.
> MZ said to use a ptrace to figure out what is being shipped over the link
> to cause it. Just havent gotten around to it yet.
>
> ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
> Jake Messinger ph:713-772-6690 Lucent Dealer
> AMS, Inc. fx:713-774-3498 Medical Billing
> 8300 Bissonnet #400 jake@ams.com Internet Services
> Houston, Texas 77074 www.ams.com/~jake Business Management
> ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
>
>

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>