(RADIATOR) Ascend-Data-Filter...

Hugh Irvine hugh at open.com.au
Fri May 3 01:37:56 CDT 2002


Hello Chris -

The reason for the different behaviour is that you will only get one or the 
other (but not both) of DefaultReply or AddToReply.

See sections 6.17.8 and 6.17.10 in the Radiator 3.0 reference manual.
("doc/ref.html").

regards

Hugh


On Fri, 3 May 2002 09:42, Chris Craft wrote:
> This works:
>
> <Realm unlimitedDUP>
>         RewriteUsername      s/^([^@]+).*/$1/
>         <AuthBy FILE>
>                 Filename /etc/raddb/users.unlimited.dup
>                 DefaultReply Service-Type=Framed-User,\
> Framed-Protocol=PPP,\
> Framed-IP-Address=255.255.255.254,\
> Framed-IP-Netmask=255.255.255.255,\
> Ascend-Data-Filter="ip in forward tcp est",\
> Ascend-DataFilter="ip in forward dstip 216.127.146.0/24",\
> Ascend-DataFilter="ip in forward dstip 63.80.49.5",\
> Ascend-DataFilter="ip in forward dstip 65.89.75.10",\
> Ascend-Data-Filter="ip in drop tcp dstport = 25",\
> Ascend-Data-Filter="ip in forward"
>         </AuthBy>
>         AcctLogFileName %L/%N.dup/detail
> </Realm>
>
> ...but the following didn't:
>
> <Realm unlimitedDUP>
>         RewriteUsername      s/^([^@]+).*/$1/
>         <AuthBy FILE>
>                 Filename /etc/raddb/users.unlimited.dup
>                 DefaultReply Service-Type=Framed-User,\
> Framed-Protocol=PPP,\
> Framed-IP-Address=255.255.255.254,\
> Framed-IP-Netmask=255.255.255.255
> 		AddToReply Ascend-Data-Filter="ip in forward tcp est",\
> Ascend-DataFilter="ip in forward dstip 216.127.146.0/24",\
> Ascend-DataFilter="ip in forward dstip 63.80.49.5",\
> Ascend-DataFilter="ip in forward dstip 65.89.75.10",\
> Ascend-Data-Filter="ip in drop tcp dstport = 25",\
> Ascend-Data-Filter="ip in forward"
>         </AuthBy>
>         AcctLogFileName %L/%N.dup/detail
> </Realm>
>
> Thanks again.
> Chris Craft, Postmaster/NOC Meister
> SpringSips.com
>
> On Wednesday 01 May 2002 02:46, Hugh Irvine wrote:
> > Hello Chris -
> >
> > Could you send me a copy of what works and what doesn't so I can check
> > it?
> >
> > thanks
> >
> > Hugh (who also loves Radiator....)
> >
> > > Uh oh... first day on the list, and already I'm doing the "answering my
> > > own post" faux-pas!
> > >
> > > For some reason, nothing in my "AddToReply" directives is being added.
> > > When I added the stuff under "AddToReply" to the "DefaultReply"
> > > directive, all was good in the world.
> > >
> > > Go figure.
> > >
> > > Thanks for being there. (I just love Radiator! :)
> > >
> > > Chris Craft, Postmaster/NOC Meister
> > > SpringSips.com
>
> <<<CHOP>>>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list