Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Cisco: uBR

Config File Question - filtering on the cfg file

 

 

Cisco ubr RSS feed   Index | Next | Previous | View Threaded


pryan at rogers

Apr 26, 2005, 2:22 PM

Post #1 of 3 (7131 views)
Permalink
Config File Question - filtering on the cfg file

Just a question regarding the filtering of IP's & ports in the docsis config
file.
If I have a requirent to filter port 25 - to avoid spambots, I would filter
port 25 outbound with the exception of my authorized server, as well as deny
inbound attempts.

Does the config file have the capability for multiple authorized IP's - can
anyone provide me with sample config file - jsut to get a beter
understanding....



best regards,

Paul R_


xlimitx at gmail

Apr 26, 2005, 4:15 PM

Post #2 of 3 (6764 views)
Permalink
Re: Config File Question - filtering on the cfg file [In reply to]

Paul,

I don't have an example config file, but yes you can authorize
multiple SMTP servers as far as I know. You should be able to just
set up a separate instance for each mail server in your filter rules.

On 4/26/05, Paul Ryan <pryan [at] rogers> wrote:
> Just a question regarding the filtering of IP's & ports in the docsis config
> file.
> If I have a requirent to filter port 25 - to avoid spambots, I would filter
> port 25 outbound with the exception of my authorized server, as well as deny
> inbound attempts.
>
> Does the config file have the capability for multiple authorized IP's - can
> anyone provide me with sample config file - jsut to get a beter
> understanding....
>
> best regards,
>
> Paul R_
>
> _______________________________________________
> cisco-ubr mailing list
> cisco-ubr [at] puck
> https://puck.nether.net/mailman/listinfo/cisco-ubr
>


--
"Only two things are infinite, the universe and human stupidity, and
I'm not sure about the former."
- Albert Einstein


yann.gauteron at net2000

May 11, 2005, 12:05 AM

Post #3 of 3 (6760 views)
Permalink
Re: Config File Question - filtering on the cfg file [In reply to]

Hi Paul,

Sorry for the late answer, I was on a vacantion... If you didn't find
the answer by yourself, here is an extract of a configuration file I
produced


SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.2.4 Integer 4;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.3.4 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.4.4 Integer 0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.5.4 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.6.4 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.7.4 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.8.4 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.9.4 IPAddress 80.83.47.128;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.10.4 IPAddress 255.255.255.128;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.11.4 Integer 6;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.12.4 Integer 0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.13.4 Integer 65535;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.14.4 Integer 25;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.15.4 Integer 25;

SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.2.5 Integer 4;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.3.5 Integer 1;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.4.5 Integer 0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.5.5 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.6.5 Integer 2;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.7.5 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.8.5 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.9.5 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.10.5 IPAddress 0.0.0.0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.11.5 Integer 6;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.12.5 Integer 0;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.13.5 Integer 65535;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.14.5 Integer 25;
SnmpMibObject .1.3.6.1.2.1.69.1.6.4.1.15.5 Integer 25;

This file worked well for me. The idea was to refuse all of our
customers to address any SMTP servers, except the one in our public
server range. (To avoid our customer to propagate SPAM, typically).

My tests with this config file were successful. Now I have to deploy
this configuration file for all of our customers, except the
professional ones which could have a legitimate SMTP server.

Best regards,
Yann

Paul Ryan a écrit :

>Just a question regarding the filtering of IP's & ports in the docsis config
>file.
>If I have a requirent to filter port 25 - to avoid spambots, I would filter
>port 25 outbound with the exception of my authorized server, as well as deny
>inbound attempts.
>
>Does the config file have the capability for multiple authorized IP's - can
>anyone provide me with sample config file - jsut to get a beter
>understanding....
>
>
>
>best regards,
>
>Paul R_
>
>
>

Cisco ubr RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.