> Is 16 bytes enough to protect the server from brute > force attack ?
Well assuming JUST the alphabet was used in the same case thats: 16^26 = 20282409603651670423947251286016 possible combinations take a while to search that space.. and the limit is 32, Alan said 16 is common. I think we are safe for a while :) -- ----- Graeme Hinchliffe (BSc) Core Team Member Zen Internet (http://www.zen.co.uk/) ICQ 3842605 (link) Direct: 0845 058 9074 Main : 0845 058 9000 Fax : 0845 058 9005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html