Hello Michael,

I tried the diald filter and it did not work. Note I am on 2.0.34.

1st with ignore ip ip.protocol=88 in my filter and on restarting diald I received

Feb  5 06:46:28 mandy diald[3680]: ignore parsing error. Got token 'ip'. Not a known 
protocol rule.
Feb  5 06:46:28 mandy diald[3680]: parse string: 'ip ip.protocol=88'

Then - ignore ip ip.igrp in my filter and putting igrp    88      IGRP in 
/etc/protocols 
Feb  5 06:50:38 mandy diald[3746]: ignore parsing error. Got token 'ip'. Not a known 
protocol rule.
Feb  5 06:50:38 mandy diald[3746]: parse string: 'ip ip.igrp'

Do I need to do anything after changing /etc/protocols?

My /etc/protocols does have ip listed.

Any thoughts - remember to ask me the obvious.

Cheers,
Col.

On Thursday, February 03, 2000 9:19 PM, Michael Fowler [SMTP:[EMAIL PROTECTED]] 
wrote:
>
> 
> I think (think because I haven't tested it, nor have any way to test it) you
> can filter it one of two ways; either at the firewall level, or at the diald
> level.
> 
> If you're using Linux 2.1 later (with ipchains) the rule:
> 
>     ipchains -A input -p 88 -i ppp0
> 
> should do it (you may need to replace ppp0 with whatever interface your
> modem comes up on, or leave the -i argument off altogether if you don't care
> about IGRP packets).
> 
> With diald, the rule:
> 
>     ignore ip ip.protocol=88
> 
> or possibly
> 
>     ignore ip ip.igrp
> 
> should do it.  The second rule requires you have a line in /etc/protocols:
> 
>     igrp    88      IGRP
> 
> 
> I'd like to know if one or both solutions worked for you.
> 
> 
> Michael
> --
> Administrator                      www.shoebox.net
> Programmer, System Administrator   www.gallanttech.com
> --

-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]

Reply via email to