On Sat, 8 May 1999, David A. Ranch wrote:
> >The base problem is that I have no way of knowing which ppp interface is
> >which. One minute ppp0 is dialout and the next it is dialin and so on.
>
> You'll have to make your scripts more intelligent or just trust
> your internal PPP users.
How to make it intelligent: You can add a parameter to the pppd
command line ("ipparam xxxx"), and pppd will pass that parameter to
the /etc/ppp/ip-up script on its command line.
Use different parameters when starting pppd for dialout vs. pppd for
dialin, and /etc/ppp/ip-up (and its descendants) can tell whether
they're running on behalf of dialout or dialin, and set up the
appropriate firewall rules.
There's some brief discussion of how to do this under the "invoking
the generated ipfwadm script" link on my firewall GUI page, at
ftp://ftp.rubyriver.com/pub/jhardin/ipfwadm/ipfwadm.html
--
John Hardin KA7OHZ [EMAIL PROTECTED]
pgpk -a finger://gonzo.wolfenet.com/jhardin PGP key ID: 0x41EA94F5
PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
-----------------------------------------------------------------------
I don't want people taking action based on Microsoft thinking about
doing something.
-- Microsoft's Don Jones, CNN, 5/3/99
Why the sudden about-face on vaporware?
-----------------------------------------------------------------------
10 days until Star Wars episode I
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]