Re: e-mail only filter

Ted Olson ( tolson@ocsnet.net )
Wed, 21 May 1997 09:32:22 -0700

I would be interested in Kurt's kind of radius-managed solution too, since
we have a mix of NASes (Livingston, Ascend, Bay).

-Ted

At 12:14 PM 5/21/97 -0400, you wrote:
>Looking at it, looks like this would allow access to any nameserver and
>e-mail ports, regardless of whether or not they were local or not.
>
>Not a biggie, what I'm wonderring though is is it necessary to manually
>enter in the filter into every terminal server ? Can you not put the filter
>file in your RADIUS directory and have it passed to the tserver when the
>user authenticates ?
>
>Thanks for the note.
>
>- Kurt
>
>----------
>> From: Kent Runyan <krunyan@konnections.com>
>> To: radiusnt@emerald.iea.com
>> Subject: e-mail only filter
>> Date: Tuesday, May 20, 1997 5:07 PM
>>
>> Somebody was looking for an e-mail only filter...
>>
>>
>> This is the filter I use to limit users to our local e-mail server and
>> nameserver.
>>
>> permit udp dst eq 53
>> permit tcp dst eq 25
>> permit tcp dst eq 110
>> deny
>>
>> It is loaded into the filters table of each of the PM2e's and is called
>> "emailonly.in"
>>
>>
>>
>> This is how the filter is assigned to the users
>>
>> username Password = "password",
>> User-Service = Framed-User,
>> Framed-Filter = "emailonly",
>> Idle-Timeout = 300,
>>
>>
>> ----------------------------------------------------------
>> RadiusNT Mailing List listserver@emerald.iea.com
>>
>
> ----------------------------------------------------------
> RadiusNT Mailing List listserver@emerald.iea.com
>
>