Re: [Help-gnu-radius] Ascend-Data-Filter syntax

[Sergey Poznyakoff]

Hi Erik,

You have forgotten to say what version of GNU Radius you are running.

Erik Olson <address@hidden> wrote:

> DEFAULT Auth-Type = Local,
>                 Simultaneous-Use = 1,
>                 Strip-User-Name = Yes

This part is missing User-Password attribute, which is  mandatory
for Auth-Type = Local

>         Service-Type = Framed-User,
>                 Framed-Protocol = PPP,
>                 Ascend-Data-Filter="ip in forward tcp est",

Specifying protocol (tcp, in this case) requires at least srcip/srcport
or dstip/dstport to be present. 

>                 Ascend-Data-Filter="ip in forward dstip 66.77.41.0/24",

This one is OK.

>                 Ascend-Data-Filter="ip in drop tcp dstport=25",

Add spaces around the '=' sign:

                  Ascend-Data-Filter="ip in drop tcp dstport = 25"
                  
>                 Ascend-Data-Filter="ip in drop tcp srcport=80",

Likewise.

>                 Ascend-Data-Filter="ip in forward",

This one is OK

Regards,
Sergey