Bug 104928 - ipppd does not possess active-filter option
Summary: ipppd does not possess active-filter option
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: isdn4k-utils
Version: 9
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Than Ngo
QA Contact: Jay Turner
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2003-09-23 17:23 UTC by Marek Greško
Modified: 2015-01-08 00:06 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2004-06-22 10:58:02 UTC
Embargoed:


Attachments (Terms of Use)

Description Marek Greško 2003-09-23 17:23:09 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; sk-SK; rv:1.2.1) Gecko/20030225

Description of problem:
The ipppd daemon does not possess active-filter option present in pppd. This
option is needed to make selected packets not to reset the idle timer of the
connection. The ippp link could be held up by third party to cause large phone
bills.

I suspect this issue is related to kernel upgrade also. Latest versions of
kernel (I checked 2.4.22) possess the CONFIG_IPPP_FILTER. Current Red Hat kernel
does not.

Version-Release number of selected component (if applicable):
isdn4k-utils-3.1-62

How reproducible:
Always

Steps to Reproduce:
1. Setup firewall to DROP for example ICMP echo requestes and dial the link with
the idle option set up.
2. Ask somebody to ping your host from the outside.
3. Your link stays up after idle time.
    

Actual Results:  You do not have control about traffic which holds the ISDN link up.

Expected Results:  There is a possibility to filter packet which make sense to
link activity similar to pppd active-filter feature.

Additional info:

This bug may cause large phone bills.

Comment 1 Than Ngo 2003-09-29 15:27:36 UTC
it seems that the current isdn4k-utils-3.1-62 does not support this options.
And it needs kernel patch to have PPP filtering support.

i will update soon new isdn4k-utils, which supports this feature.

Comment 2 Than Ngo 2004-06-22 10:58:02 UTC
it's fixed in FC1/FC2.


Note You need to log in before you can comment on or make changes to this bug.