(RADIATOR) Radiator Ascend IP FIltering

1999-06-15 Thread Anonymous

Hi,

I have attached two files. fil.txt is the one we would like to set as reply
attribute, and the result of it.

Anybody has an idea why this error?

Many thanks,

Ferhat


Mon May 31 11:45:02 1999: DEBUG: Radius::AuthSQL ACCEPT:
Mon May 31 11:45:02 1999: DEBUG: Access accepted for domino
Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: ip in for
ward tcp dstip 195.174.219.30 dstport=20
Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: ip in for
ward tcp dstip 195.174.219.30 dstport=21
Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: ip out fo
rward tcp dstip 195.174.219.30 dstport1023
Mon May 31 11:45:02 1999: DEBUG: Packet dump:
*** Sending to 195.174.219.204 port 1782 
Code:   Access-Accept
Identifier: 205
Authentic:  8168224M2381432124828249201223~177212161
Attributes:
User-Service = Framed-User
Framed-Protocol = PPP
Framed-Netmask = 255.255.255.0
Framed-Routing = None
Framed-MTU = 1500
Framed-Compression = Van-Jacobson-TCP-IP
Ascend-Data-Filter = ip in forward tcp dstip 195.174.219.30 dstport=20
Ascend-Data-Filter = ip in forward tcp dstip 195.174.219.30 dstport=20
Ascend-Data-Filter = ip in forward tcp dstip 195.174.219.30 dstport=21
Ascend-Data-Filter = ip out forward tcp dstip 195.174.219.30 dstport102
3
Ascend-Data-Filter = ip in drop
Ascend-Data-Filter = ip out drop


User-Service=Framed-User,Ascend-Data-Filter="ip in forward tcp dstip 195.174.219.30 
dstport=20",Ascend-Data-Filter="ip in forward tcp dstip 195.174.219.30 
dstport=21",Ascend-Data-Filter="ip out forward tcp dstip 195.174.219.30 
dstport1023",Ascend-Data-Filter="ip in drop",Ascend-Data-Filter="ip out 
drop",Framed-Protocol=PPP,Framed-Netmask=255.255.255.0,Framed-Routing=None,Framed-MTU=1500,Framed-Compression=Van-Jacobson-TCP-IP


Re: (RADIATOR) Radiator Ascend IP FIltering

1999-06-15 Thread Anonymous

I had problems with the "tcp" and "port" parameters in earlier versions
of Radiator (2.11), but Mike said he fixed those.  When I tested it in
2.12, I still found some strange problems with them so we don't filter
on ports now.  

Not sure if these have been fixed in 2.13.

But in any case, your syntax is incorrect I think.  You need to put the
/32 for the netmask somewhere.

Check out the regular expression that Radiator users to process the Ascend
filter attributes.  I think the source code has some comments about the
format.  It might be different from that described in the Ascend manuals.

On Tue, 15 Jun 1999, Ferhat Dilman wrote:

 Hi,
 
 I have attached two files. fil.txt is the one we would like to set as reply
 attribute, and the result of it.
 
 Anybody has an idea why this error?
 
 Many thanks,
 
 Ferhat
 


_/_/_/ Peter Chow   Chief Technical Advisor
_/_/_/  interQ Corporation - System Division
_/_/_/ [EMAIL PROTECTED]   Shibuya Infoss Tower 10F
_/_/_/ (tel)+81-3-5456-2555 20-1 Sakuragaokacho, Shibuya-ku
_/_/_/ (fax)+81-3-5456-2556 Tokyo, Japan
_/_/_/ http://www.interq.ad.jp  150-0031



===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Radiator Ascend IP FIltering

1999-06-15 Thread Anonymous

You have to specify the /32 for the netmask of the ip-address. I found this out
the same way. Check out the code to see what exact syntax is required by
Radiator.

- Joost.

 This is a multi-part message in MIME format.
 
 --=_NextPart_000_000B_01BEB732.08F081E0
 Content-Type: text/plain;
  charset="iso-8859-9"
 Content-Transfer-Encoding: 7bit
 
 Hi,
 
 I have attached two files. fil.txt is the one we would like to set as reply
 attribute, and the result of it.
 
 Anybody has an idea why this error?
 
 Many thanks,
 
 Ferhat
 
 --=_NextPart_000_000B_01BEB732.08F081E0
 Content-Type: text/plain;
  name="hata.txt"
 Content-Transfer-Encoding: quoted-printable
 Content-Disposition: attachment;
  filename="hata.txt"
 
 Mon May 31 11:45:02 1999: DEBUG: Radius::AuthSQL ACCEPT:
 Mon May 31 11:45:02 1999: DEBUG: Access accepted for domino
 Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: =
 ip in for
 ward tcp dstip 195.174.219.30 dstport=3D20
 Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: =
 ip in for
 ward tcp dstip 195.174.219.30 dstport=3D21
 Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: =
 ip out fo
 rward tcp dstip 195.174.219.30 dstport1023
 Mon May 31 11:45:02 1999: DEBUG: Packet dump:
 *** Sending to 195.174.219.204 port 1782 
 Code:   Access-Accept
 Identifier: 205
 Authentic:  =
 8168224M2381432124828249201223~177212161
 Attributes:
 User-Service =3D Framed-User
 Framed-Protocol =3D PPP
 Framed-Netmask =3D 255.255.255.0
 Framed-Routing =3D None
 Framed-MTU =3D 1500
 Framed-Compression =3D Van-Jacobson-TCP-IP
 Ascend-Data-Filter =3D ip in forward tcp dstip 195.174.219.30 =
 dstport=3D20
  Ascend-Data-Filter =3D ip in forward tcp dstip 195.174.219.30 =
 dstport=3D20
 Ascend-Data-Filter =3D ip in forward tcp dstip 195.174.219.30 =
 dstport=3D21
 Ascend-Data-Filter =3D ip out forward tcp dstip 195.174.219.30 =
 dstport102
 3
 Ascend-Data-Filter =3D ip in drop
 Ascend-Data-Filter =3D ip out drop
 
 --=_NextPart_000_000B_01BEB732.08F081E0
 Content-Type: text/plain;
  name="fil.txt"
 Content-Transfer-Encoding: quoted-printable
 Content-Disposition: attachment;
  filename="fil.txt"
 
 User-Service=3DFramed-User,Ascend-Data-Filter=3D"ip in forward tcp dstip =
 195.174.219.30 dstport=3D20",Ascend-Data-Filter=3D"ip in forward tcp =
 dstip 195.174.219.30 dstport=3D21",Ascend-Data-Filter=3D"ip out forward =
 tcp dstip 195.174.219.30 dstport1023",Ascend-Data-Filter=3D"ip in =
 drop",Ascend-Data-Filter=3D"ip out =
 drop",Framed-Protocol=3DPPP,Framed-Netmask=3D255.255.255.0,Framed-Routing=
 =3DNone,Framed-MTU=3D1500,Framed-Compression=3DVan-Jacobson-TCP-IP
 --=_NextPart_000_000B_01BEB732.08F081E0--
 
 
 ===
 Archive at http://www.thesite.com.au/~radiator/
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.