(RADIATOR) Using the Ascend-data-filter
Hugh Irvine
hugh at open.com.au
Thu Mar 27 16:21:31 CST 2003
Hello John -
This depends somewhat on what else you are doing in your configuration
file, but if you want to add this to every session, you can do
something like this:
# define Realms or Handlers
<Realm ...>
....
<AuthBy ...>
.....
AddToReply Ascend-Data-Filter = "ip in forward tcp est", \
Ascend-Data-Filter = "ip in forward dstip 192.168.0.2", \
Ascend-Data-Filter = "ip in drop tcp dstport = 25", \
Ascend-Data-Filter = "ip in forward"
</AuthBy>
....
</Realm>
regards
Hugh
On Friday, Mar 28, 2003, at 09:07 Australia/Melbourne, John Lubeck
wrote:
> Where in the radius.cfg file do I apply the Ascend-Data-Filter
> command? I need to block outgoing SMTP that is going to mail servers
> not on my network. These are the Ascend-Data-Filter commands I want to
> use:
> Ascend-Data-Filter = "ip in forward tcp est"
> Ascend-Data-Filter = "ip in forward dstip 192.168.0.2"
> Ascend-Data-Filter = "ip in drop tcp dstport = 25"
> Ascend-Data-Filter = "ip in forward"
>
> Thanks,
> John
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>
NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list