Creating a packet filter

Packet filter entries must be edited into the /etc/pppfilter file. Two or more PPP endpoint configurations can share the same entry.

If /etc/pppfilter does not exist or no filter file entry is specified for an endpoint, then all packets bring up the interface, all packets are passed, and all packets reset the idle timer.

The following filter entry describes the default behavior of a PPP link:

   # tag    keyword  filter
   

   default  bringup  !port ntp and !port who and !port route\
                     and !port timed and !port bgp and !ip proto 8\
                     and !ip proto 63 and !ip proto 89 and icmp[20]!=9\
                     and icmp[20]!=10
            pass     \
            keepup  !port ntp and !port who and !port route\
                     and !port timed and !port bgp and !ip proto 8\
                     and !ip proto 63 and !ip proto 89 and icmp[20]!=9\
                     and icmp[20]!=10

See the packetfilter(SFF) manual page for a description of the format for the filter file.

Home Notes   Home   MCSE   MCSE + Security   CCNA   CCNP   Schedule   Register   Frequently Asked Questions   Course Fees   Contact US   Boot Camp Location   Compare us to our competitors   Testimonials   Sitemap

Testimonials

Join MCSE Boot Camp & CCNA Boot Camp Back to Back Certification Today. links  270    290    291  293    294  298  299  Security  640-801  routing 811  821   831  Resources MCSE + CCNA  Training  Card pay  Papal  MCSE Notes  CCNA Notes    index main  root link  resources home    Ref1 Ref2

Vibrant offers MCSE certification training boot camp for $5400 all inclusive, instructor led at California and Baltimore.

Vibrant Bootcamp Participants come from All Around the World. Vibrant has trained students from more than 15 countries like USA, UK, (Scotland, Ireland, Wales), Switzerland, Germany, Australia, Canada, France, Holland, Japan, Belgium, Bahrain, New Zealand, Tanzania, Turkey, Kenya and more.