(PM) filtering newuser access

Stephen Johnson (srjohnson@integrityonline19.com)
Thu, 25 Mar 1999 12:29:40 -0600

I am trying to setup a filter in my PM3 to restrict certain dialup users to
browse just a couple of web servers on our local network. This is what I
have in the filter in the PM3 (in the destination addresses of course, I
have the correct addresses):

TXCOL_PM1> sh filter newuser
1 permit 0.0.0.0/0 x.x.x.c/24 tcp dst eq 80
2 permit 0.0.0.0/0 x.x.x.a/24 tcp dst eq 80
3 permit 0.0.0.0/0 0.0.0.0/0 udp dst eq 53

I plan to link to this filter from RadiusNT but right now I'm testing it
with an account on the PM3.
It seems to prevent everything except pinging the ip address of the PM3.
I basically took the format of these commands from the PM3 web page docs, #3
is supposed to be for DNS. What do I need to do to make this work?

Also, will the maximum ports setting in the PM user allow multiple logins
for that one username or is that just for port bonding in a single session?

Stephen

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>