Re: (ASCEND) Suppressing ICMP errors

To: Neale Banks <neale@idesign.com.au>
Subject: Re: (ASCEND) Suppressing ICMP errors
From: Michiel Boland <boland@diva.nl>
Date: Fri, 26 Jun 1998 09:39:15 +0200 (MEST)
cc: ascend-users@bungi.com
In-Reply-To: <Pine.HPP.3.96.980626164700.28476B-100000@gandalf.idesign.com.au>
Sender: owner-ascend-users@max.bungi.com

> I presume you are using basic filters, not Secure Access F/W?

That's right. The filter is defined in the RADIUS users file.
I currently have something like 

DEFAULT Password = "UNIX"
	Ascend-Data-Filter = "ip in forward srcip [network]"

where [network] encompasses our pool range.
It would be nice if there was a 'lose' item in filters in
addition to 'forward' and 'drop', soo that I could put "ip in
lose" after the last filter entry.

By the way, the term 'drop' is rather badly chosen by Ascend
since ICMPs are generated for these beasties. IMHO 'reject'
would have been a better word.

-- 
Michiel Boland <boland@diva.nl>
Digital Valley Internet Professionals
Duivendaal 4, Wageningen, The Netherlands
Phone: +31 317 465555, Fax: +31 317 460276

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>

References:

Re: (ASCEND) Suppressing ICMP errors

From: Neale Banks <neale@idesign.com.au>

Prev by Date: (ASCEND) IP Pool Leak NOT Fixed
Next by Date: (ASCEND) Multiple Caller-Id numbers in Radius user profile
Prev by thread: Re: (ASCEND) Suppressing ICMP errors
Next by thread: (ASCEND) 6.1.3 Release
Index(es):
- Main
- Thread