Date: Fri, 27 Aug 1999 00:57:11 +0100 From: Brian Somers <brian@Awfulhak.org> To: "Carleton A. Williams" <carl@williams.mv.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Problem setting up PPP filters Message-ID: <199908262357.AAA38790@keep.lan.Awfulhak.org> In-Reply-To: Your message of "Mon, 23 Aug 1999 18:57:07 EDT." <00c201beedba$d43f49d0$322aa8c0@home.net>
next in thread | previous in thread | raw e-mail | index | archive | help
keep:~ $ ppp
Working in interactive mode
Using interface: tun0
ppp ON keep> set filter dial 0 deny icmp
ppp ON keep> set filter dial 1 deny 0/0 198.168.0.0/16
ppp ON keep> set filter dial 6 permit 0/0 0/0
ppp ON keep> show filter dial
0 deny 0.0.0.0/0 0.0.0.0/0 icmp
1 deny 0.0.0.0/0 198.168.0.0/16
6 permit 0.0.0.0/0 0.0.0.0/0
ppp ON keep> q
keep:~ $ sudo tail -4 /etc/ppp/ppp.conf
x:
set filter dial 0 deny icmp
set filter dial 1 deny 0/0 198.168.0.0/16
set filter dial 6 permit 0/0 0/0
keep:~ $ ppp x
Working in interactive mode
Using interface: tun0
ppp ON keep> show filter dial
0 deny 0.0.0.0/0 0.0.0.0/0 icmp
1 deny 0.0.0.0/0 198.168.0.0/16
6 permit 0.0.0.0/0 0.0.0.0/0
ppp ON keep>
> I have scanned the newsgroups, but find nothing relating to this problem.
>
> PPP seems to be ignoring the lowest numbered and highest numbered filters when the "set filter ..." commands are edited into ppp.conf
>
> If I place the following commands in ppp.conf:
>
> set filter dial 0 deny icmp
> set filter dial 1 deny 0/0 198.168.0.0/16
> set filter dial 6 permit 0/0 0/0
>
> then do "show filter dial", either by running ppp in interactive mode or by connecting to a diagnostic port, I get:
>
> 1 deny 0.0.0.0/0 198.168.0.0/16
>
> Just that one line! If I then (re)enter the missing filter commands interactively, the show command produces:
>
> 0 deny 0.0.0.0/0 0.0.0.0/0 icmp
> 1 deny 0.0.0.0/0 198.168.0.0/16
> 6 permit 0.0.0.0/0 0.0.0.0/0
>
> after which the filter seems to work as intended.
>
> Any idea what gives?
>
> Thanks,
>
> Carl
[.....]
BTW, please don't post html.
--
Brian <brian@Awfulhak.org> <brian@FreeBSD.org>
<http://www.Awfulhak.org>; <brian@OpenBSD.org>
Don't _EVER_ lose your sense of humour ! <brian@FreeBSD.org.uk>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199908262357.AAA38790>