Thu Mar 02, 2006 1:05 am
Ok, I think I figured it out. Not sure if this is the best approach, but it seems to be working. If anyone has a suggestion on how to do it better, please let me know. Here's what I've done:
Added new Address List called "Filtered"
Added Routing Mark "censor" to the gateway that goes through the Content Filter
Added the following Filter Rules:
0 chain=ppp action=passthrough
1 chain=forward action=jump jump-target=ppp
2 chain=ppp-filtered action=add-src-to-address-list address-list=filtered address-list-timeout=0s
Added the following Mangle Rule:
0 chain=prerouting src-address=192.168.120.0/21 dst-address=0.0.0.0/0 src-address-list=filtered action=mark-routing new-routing-mark=censor passthrough=yes
Added "Filter-Id=ppp-filtered" to the user's Radius Attribute
Connected the user & it's routing correctly!
Are there any problems with this setup that I'm going to run into, or have I actually got it right?