Okay - so I'm doing some more reading, always a good thing - and actually what I should have done is a 'show sess username' ...and it does in fact show a filter as being applied: HiPer>> sho ses username INFORMATION FOR SESSION username Service Type: Framed Framed Protocol: PPP Idle Timeout: 1200 Speed of Connection: Auto NAS IP Address: x.x.x.x Login Service: Telnet Interface Name: slot:12/mod:19 Active Session ID: 5898560 Traffic Threshold: 0 Keep Alive Interval: 0 Framed IP Netmask: 0.0.0.0 MLPPP Fragmentation Threshold: 0 Framed Routing: None Framed Callback Identifier: 0 Framed MTU: 1500 Compression Algorithm: None Compression Reset Mode: Auto Filter Id Input: adult.in Receive Acc Map: 0 Transmit Acc Map: 0 Filter Id Output: adult.out BUT, I'm not smoking crack that we do see cases where filters - although there - do not appear to function at all. Also - does anyone know what I should be seeing with: set packet_logging all HiPer>> show packet_logging PACKET LOGGING SETTINGS Logging Packet Type: ALL Logging Packet Size: 0 I have yet to see anything - I don't see any examples of what kind of syslog message one might expect to see, and I don't end up seeing any. What I'm wanting to see is not unlike the 'log' at end of a Cisco access-list; a syslog entry indicating what port was allowed/blocked. Any clarity one can lend on that? SMT ----- Original Message ----- From: Scott M. Trautman To: usr-tc@mailman.xmission.com Sent: Monday, November 18, 2002 2:16 PM Subject: [USR-TC] Filters - me no understand Hi-- Well, it seems every so often that my filters no longer work - as in not being applied. Now is one of those times, and I'd like to understand what is going on. Looking at an interface, of a logged-in user, I see: INTERFACE slot:10/mod:16 SETTINGS Description: GWC Modem Driver Type: RS232 Speed: 28800 High Speed: 0 Administrative Status: Up Operational Status: Up Link Up/Down Traps: DISABLED Promiscuous Mode: FALSE Connector Present: TRUE Filter Access: ON Last Change: 18d 23:41:04 Policy Access: Private Policy File: Input Filter: Output Filter: Host Type: SELECT Connection Type: NORMAL Port Type: LOGIN_NETWORK User Name: Access: TWO_WAY Cojent being the "Filter Access: ON" And Input Filter: Output Filter: Even though this user has, as applied upon login from RADIUS: Framed-Filter-Id = adult And I do have the filters on there: list filter: adult.in NORMAL IP adult.out NORMAL IP Okay-- Why then, does it not appear to have applied a filter? I'm using: System Version: V5.3.3/Non-Encr ...but this craziness seems to happen regardless of version. I used 'set modem_groups all filter_access on' to begin with, and that doesn't seem to be an issue. I've got to be missing something here - can anyone help?? SMT