Real Time Ascend Maling List Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
(ASCEND) Finger Filter - Quick & Dirty HowTo
I typed this up this afternoon. This will only allow a specified
host/network to finger the Max from the ethernet side. Any user dialed
into the Max will still be able to finger it. In order to filter it from
the WAN side, I believed you'd have to set "Use Answer as Default" to
"Yes", and define this filter as the default data filter in the Answer
profile. If you wish to define multiple hosts / networks, just insert
them after In filter 01 using the same format. Might want to be careful
how many filters you use, though, as every packet passing through your
ethernet port is going to be run through these filters, and the Maxen seem
to sometimes have a hard enough time as it is. (=
Hope this helps somebody. .
----
A.A.A.A - IP of Allowed Host / Network
B.B.B.B - Mask for Allowed Host / Network
C.C.C.C - IP of eth0 on Max
DD - Bitmask of eth0 on Max
START=FILT=900=3
Name=Finger Filter
In filter 01...Valid=Yes
In filter 01...Type=IP
In filter 01...Ip...Forward=Yes
In filter 01...Ip...Src Mask=B.B.B.B
In filter 01...Ip...Src Adrs=A.A.A.A
In filter 01...Ip...Dst Mask=255.255.255.255
In filter 01...Ip...Dst Adrs=C.C.C.C
In filter 01...Ip...Protocol=6
In filter 01...Ip...Dst Port Cmp=Eql
In filter 01...Ip...Dst Port #=79
In filter 02...Valid=Yes
In filter 02...Type=IP
In filter 02...Ip...Dst Mask=255.255.255.255
In filter 02...Ip...Dst Adrs=C.C.C.C
In filter 02...Ip...Protocol=6
In filter 02...Ip...Dst Port Cmp=Eql
In filter 02...Ip...Dst Port #=79
In filter 03...Valid=Yes
In filter 03...Type=GENERIC
In filter 03...Generic...Forward=Yes
Out filter 01...Valid=Yes
Out filter 01...Type=GENERIC
Out filter 01...Generic...Forward=Yes
END=FILT=900=3
START=ETHERNET=900=0
Ether options...IP Adrs=C.C.C.C/DD
Ether options...Filter=4
Finger=Yes
END=ETHERNET=900=0
----
+------------------------------------------+
| Eric Reeves ereeves@ghg.net |
| GHG Corporation tilex@alluvium.com |
+------------------------------------------+
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>