(RADIATOR) Radiator Ascend IP FIltering
Hi, I have attached two files. fil.txt is the one we would like to set as reply attribute, and the result of it. Anybody has an idea why this error? Many thanks, Ferhat Mon May 31 11:45:02 1999: DEBUG: Radius::AuthSQL ACCEPT: Mon May 31 11:45:02 1999: DEBUG: Access accepted for domino Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: ip in for ward tcp dstip 195.174.219.30 dstport=20 Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: ip in for ward tcp dstip 195.174.219.30 dstport=21 Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: ip out fo rward tcp dstip 195.174.219.30 dstport1023 Mon May 31 11:45:02 1999: DEBUG: Packet dump: *** Sending to 195.174.219.204 port 1782 Code: Access-Accept Identifier: 205 Authentic: 8168224M2381432124828249201223~177212161 Attributes: User-Service = Framed-User Framed-Protocol = PPP Framed-Netmask = 255.255.255.0 Framed-Routing = None Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP Ascend-Data-Filter = ip in forward tcp dstip 195.174.219.30 dstport=20 Ascend-Data-Filter = ip in forward tcp dstip 195.174.219.30 dstport=20 Ascend-Data-Filter = ip in forward tcp dstip 195.174.219.30 dstport=21 Ascend-Data-Filter = ip out forward tcp dstip 195.174.219.30 dstport102 3 Ascend-Data-Filter = ip in drop Ascend-Data-Filter = ip out drop User-Service=Framed-User,Ascend-Data-Filter="ip in forward tcp dstip 195.174.219.30 dstport=20",Ascend-Data-Filter="ip in forward tcp dstip 195.174.219.30 dstport=21",Ascend-Data-Filter="ip out forward tcp dstip 195.174.219.30 dstport1023",Ascend-Data-Filter="ip in drop",Ascend-Data-Filter="ip out drop",Framed-Protocol=PPP,Framed-Netmask=255.255.255.0,Framed-Routing=None,Framed-MTU=1500,Framed-Compression=Van-Jacobson-TCP-IP
Re: (RADIATOR) Radiator Ascend IP FIltering
I had problems with the "tcp" and "port" parameters in earlier versions of Radiator (2.11), but Mike said he fixed those. When I tested it in 2.12, I still found some strange problems with them so we don't filter on ports now. Not sure if these have been fixed in 2.13. But in any case, your syntax is incorrect I think. You need to put the /32 for the netmask somewhere. Check out the regular expression that Radiator users to process the Ascend filter attributes. I think the source code has some comments about the format. It might be different from that described in the Ascend manuals. On Tue, 15 Jun 1999, Ferhat Dilman wrote: Hi, I have attached two files. fil.txt is the one we would like to set as reply attribute, and the result of it. Anybody has an idea why this error? Many thanks, Ferhat _/_/_/ Peter Chow Chief Technical Advisor _/_/_/ interQ Corporation - System Division _/_/_/ [EMAIL PROTECTED] Shibuya Infoss Tower 10F _/_/_/ (tel)+81-3-5456-2555 20-1 Sakuragaokacho, Shibuya-ku _/_/_/ (fax)+81-3-5456-2556 Tokyo, Japan _/_/_/ http://www.interq.ad.jp 150-0031 === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Radiator Ascend IP FIltering
You have to specify the /32 for the netmask of the ip-address. I found this out the same way. Check out the code to see what exact syntax is required by Radiator. - Joost. This is a multi-part message in MIME format. --=_NextPart_000_000B_01BEB732.08F081E0 Content-Type: text/plain; charset="iso-8859-9" Content-Transfer-Encoding: 7bit Hi, I have attached two files. fil.txt is the one we would like to set as reply attribute, and the result of it. Anybody has an idea why this error? Many thanks, Ferhat --=_NextPart_000_000B_01BEB732.08F081E0 Content-Type: text/plain; name="hata.txt" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="hata.txt" Mon May 31 11:45:02 1999: DEBUG: Radius::AuthSQL ACCEPT: Mon May 31 11:45:02 1999: DEBUG: Access accepted for domino Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: = ip in for ward tcp dstip 195.174.219.30 dstport=3D20 Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: = ip in for ward tcp dstip 195.174.219.30 dstport=3D21 Mon May 31 11:45:02 1999: WARNING: Could not parse Ascend-Data-Filter: = ip out fo rward tcp dstip 195.174.219.30 dstport1023 Mon May 31 11:45:02 1999: DEBUG: Packet dump: *** Sending to 195.174.219.204 port 1782 Code: Access-Accept Identifier: 205 Authentic: = 8168224M2381432124828249201223~177212161 Attributes: User-Service =3D Framed-User Framed-Protocol =3D PPP Framed-Netmask =3D 255.255.255.0 Framed-Routing =3D None Framed-MTU =3D 1500 Framed-Compression =3D Van-Jacobson-TCP-IP Ascend-Data-Filter =3D ip in forward tcp dstip 195.174.219.30 = dstport=3D20 Ascend-Data-Filter =3D ip in forward tcp dstip 195.174.219.30 = dstport=3D20 Ascend-Data-Filter =3D ip in forward tcp dstip 195.174.219.30 = dstport=3D21 Ascend-Data-Filter =3D ip out forward tcp dstip 195.174.219.30 = dstport102 3 Ascend-Data-Filter =3D ip in drop Ascend-Data-Filter =3D ip out drop --=_NextPart_000_000B_01BEB732.08F081E0 Content-Type: text/plain; name="fil.txt" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="fil.txt" User-Service=3DFramed-User,Ascend-Data-Filter=3D"ip in forward tcp dstip = 195.174.219.30 dstport=3D20",Ascend-Data-Filter=3D"ip in forward tcp = dstip 195.174.219.30 dstport=3D21",Ascend-Data-Filter=3D"ip out forward = tcp dstip 195.174.219.30 dstport1023",Ascend-Data-Filter=3D"ip in = drop",Ascend-Data-Filter=3D"ip out = drop",Framed-Protocol=3DPPP,Framed-Netmask=3D255.255.255.0,Framed-Routing= =3DNone,Framed-MTU=3D1500,Framed-Compression=3DVan-Jacobson-TCP-IP --=_NextPart_000_000B_01BEB732.08F081E0-- === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.