"Luis Guido" <[EMAIL PROTECTED]> wrote:
> Right.... You are saying that's virtual impossible to handle all at the
> Proxy level. I'm trying to replicate one scenario that I have with
> Radiator, and I guess (just a thought) it would be nice to have it also
> on FreeRadius.

  Ok...

> This away I no longer depend on the client config to prevent some loop.
> If a request arrives me from client1, the client1's handler can't be
> used to forward the request to. The request will be handle somewhere
> else (ignored or droped.
> If the server can keep track from what client send the request, it can
> be use for proxy decisions.

  You can do this in FreeRADIUS, too, in the "users" file:

#---
DEFAULT   Realm == "client1_realm", Client-IP-Address != 1.2.3.4, Auth-Type := Reject

#---

  e.g. Requests for that realm, NOT from the client, are rejected.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to