Mr. Holt,

If you use GBAdmin to create a remote access filter it is always stuck at 
the bottom of the filter list.  Which puts it below the final deny 
everything filter.  Since the filter list is checked in order looking for 
matches it will never hit your new accept filter.  This goes for other 
filter list as well, ie: IP Pass Through and Outbound.

All you need to do using GBAdmin is move your new filter above your deny 
filters.  To move a filter using GBAdmin, right click on the index 
number.  A little shadow box will appear.  You can then drag this filter 
above your deny filters or all the way to the top of the list.  Then you 
will not need to default your filter set.

As an aside, the web interface allows you to insert a filter at any 
position you wish.  I realize may users like GBAdmin over the network better.

David




At 10:10 AM 2/2/00 -0500, Al Holt wrote:
>Send postings to: [EMAIL PROTECTED]
>Access the list archives at:
>http://www.gnatbox.com/gb-users/
>----------------------------------
>Am I missing something?
>
>We've been running GnatBox for just under 2 years now and I've reconfigured
>the 'box a number of times, now we're on Version 3.0.1.  Each time I add a
>tunnel I find that I have to set the remote access filters (RAF) to their
>default settings to get rid of error messages.
>
>So, what's wrong with that?  I use GBAdmin on my NT machine to build runtime
>disks.  I like to document what each RAF does by adding a comment as to what
>it's there for.
>
>Each time the section is set to default, those comments are lost.  Also, we
>have a couple of filters that are customized for our installation and those
>also get reset, so I go through the new RAF's with an old configuration
>report and make changes.
>
>It would be nice to be able to insert a RAF in the list but all I can ever
>get it to do is to slap it at the end of the list, which creates an error.
>Of course, when all else fails, the default settings are great and a quick
>way to get going.  I've looked through the manual, but I don't see what I'm
>looking for.
>
>Thanks for any help.
>
>--Al Holt
>----------------------------------------------
>To Unsubscribe: send mail to [EMAIL PROTECTED]
>with "unsubscribe gb-users your_email_address
>in the body of the message



David Brooks                         Email: [EMAIL PROTECTED]
Tech Support                         Tel: +1.407.380.0220 x102
Global Technology Associates, Inc.   Fax: +1.407.380.6080
3505 Lake Lynda Drive                Web: http://www.gta.com
Suite 109                                 http://www.gnatbox.com
Orlando, Florida 32817
USA




Reply via email to