Hello Urban -
On Tue, 24 Oct 2000, Urban wrote:
> Hi
>
> I have a problem with Ascend-Data-Filter attribute.
>
> I would like to set up a filter that can lookup a ip in a DNS
> and also surf to that address.
>
> Just the first Ascend-Data-Filter is in the respone from
> the "radpwtst -trace"
>
.........
>
> AddToReplyIfNotExist Service-Type = Framed-User,\
> Framed-Protocol = PPP,\
> Framed-Routing = None,\
> Ascend-Assign-IP-Pool = 0,\
> Ascend-Client-Assign-DNS = 1,\
> Ascend-Client-Primary-DNS = 194.98.65.65,\
> Ascend-Client-Secondary-DNS = 194.98.65.165,\
> Ascend-Idle-Limit = 3600,\
> Ascend-Data-Filter = "ip IN FORWARD dstip 213.41.2.120 srcip 0.0.0.0
>6 dstport = 80",\
> Ascend-Data-Filter = "ip OUT FORWARD dstip 0.0.0.0 srcip
>213.41.2.120 6 srcport = 80",\
> Ascend-Data-Filter = "ip IN FORWARD dstip 0.0.0.0 srcip 0.0.0.0 17
>dstport = 53",\
> Ascend-Data-Filter = "ip OUT FORWARD dstip 0.0.0.0 srcip 0.0.0.0 17
>srcport = 53",\
> Ascend-Data-Filter = "ip OUT DROP",\
> Ascend-Data-Filter = "ip IN DROP"
>
Your problem is in the AddToReplyIfNotExist, as once you have the first
Ascend-Data-Filter line in the packet, the following additions will fail, by
definition (ie. an Ascend-Data-Filter will then exist).
Use an AddToReply instead.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
