Huh?

  It sounds like you're trying to use callback to get the session
billed to the host end.  That's not what it's for -- to get that,
you want an "800" number or WATS line or such.

  Dial-in callback is a *security* feature.  The intention is to
limit the locations from which the host can be reached, by having
it dial one of a restricted set of callback numbers to initiate
any session.
  The set of users and their callback numbers, then, must be
configured ahead of time.  Allowing users to offer arbitrary
callback numbers at connection time would completely negate the
security the feature is trying to provide.

David Gillett


> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:[EMAIL PROTECTED] Behalf Of Markus
> Hofbauer
> Sent: November 10, 2003 08:13
> To: [EMAIL PROTECTED]
> Subject: [FW-1] off topic question
>
>
> hi,
>
> sorry for this off topic question...
>
> does anybody use a cisco for dial in (with callback
> configured) and a rsa
> ace-server to authenticate the users via radius?
>
> the user is authenticated but never gets a prompt to put in
> his/her callback-
> number...
>
> if anybody successfully uses this configuration please
> contact me off the
> list.
>
> thanks,
> markus
>
> --
> Markus Hofbauer, IT-Service / Security
> Bacher Systems EDV GmbH, Wienerbergstr. 11B, A-1101 Wien, Austria
> phone: +43 (1) 60 126-34 | fax: +43 (1) 60 126-4
> e-mail: [EMAIL PROTECTED] | web: www.bacher.at
>
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to