Mailing List Archive

Config File Question - filtering on the cfg file
Just a question regarding the filtering of IP's & ports in the docsis config
file.
If I have a requirent to filter port 25 - to avoid spambots, I would filter
port 25 outbound with the exception of my authorized server, as well as deny
inbound attempts.

Does the config file have the capability for multiple authorized IP's - can
anyone provide me with sample config file - jsut to get a beter
understanding....



best regards,

Paul R_
Re: Config File Question - filtering on the cfg file [ In reply to ]
Paul,

I don't have an example config file, but yes you can authorize
multiple SMTP servers as far as I know. You should be able to just
set up a separate instance for each mail server in your filter rules.

On 4/26/05, Paul Ryan <pryan@rogers.wave.ca> wrote:
> Just a question regarding the filtering of IP's & ports in the docsis config
> file.
> If I have a requirent to filter port 25 - to avoid spambots, I would filter
> port 25 outbound with the exception of my authorized server, as well as deny
> inbound attempts.
>
> Does the config file have the capability for multiple authorized IP's - can
> anyone provide me with sample config file - jsut to get a beter
> understanding....
>
> best regards,
>
> Paul R_
>
> _______________________________________________
> cisco-ubr mailing list
> cisco-ubr@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-ubr
>


--
"Only two things are infinite, the universe and human stupidity, and
I'm not sure about the former."
- Albert Einstein
Re: Config File Question - filtering on the cfg file [ In reply to ]
Hi Paul,

Sorry for the late answer, I was on a vacantion... If you didn't find
the answer by yourself, here is an extract of a configuration file I
produced


SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.2.4 Integer 4;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.3.4 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.4.4 Integer 0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.5.4 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.6.4 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.7.4 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.8.4 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.9.4 IPAddress 80.83.47.128;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.10.4 IPAddress 255.255.255.128;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.11.4 Integer 6;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.12.4 Integer 0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.13.4 Integer 65535;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.14.4 Integer 25;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.15.4 Integer 25;

SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.2.5 Integer 4;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.3.5 Integer 1;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.4.5 Integer 0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.5.5 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.6.5 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.7.5 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.8.5 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.9.5 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.10.5 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.11.5 Integer 6;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.12.5 Integer 0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.13.5 Integer 65535;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.14.5 Integer 25;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.15.5 Integer 25;

This file worked well for me. The idea was to refuse all of our
customers to address any SMTP servers, except the one in our public
server range. (To avoid our customer to propagate SPAM, typically).

My tests with this config file were successful. Now I have to deploy
this configuration file for all of our customers, except the
professional ones which could have a legitimate SMTP server.

Best regards,
Yann

Paul Ryan a écrit :

>Just a question regarding the filtering of IP's & ports in the docsis config
>file.
>If I have a requirent to filter port 25 - to avoid spambots, I would filter
>port 25 outbound with the exception of my authorized server, as well as deny
>inbound attempts.
>
>Does the config file have the capability for multiple authorized IP's - can
>anyone provide me with sample config file - jsut to get a beter
>understanding....
>
>
>
>best regards,
>
>Paul R_
>
>
>