Scott Lambert wrote: > If I need to look deeper into the problem on my own, I will be happy to > do so. If I have, once again, picked on a piece of the code that has > no bearing in my issue, please don't be afraid to tell me I am being > stupid.
I don't think I have any issues doing that... ... >> That's all well and good. However, perhaps the problem comes when >> we get to recv_one_packet() in radclient.c and unconditionally set >> reply->dst_ipaddr = client_ipaddr which is apparantly due to "udpfromto >> issues." >> >> /* >> * udpfromto issues. We may have bound to "*", >> * and we want to find the replies that are sent to >> * (say) 127.0.0.1. >> */ >> reply->dst_ipaddr = client_ipaddr; >> >> Commenting that line out makes my jail work. OK, I see why that works for radclient. I recall, though, that the original issue you ran into was with proxying. Do you still have an issue with that, or does this one-line fix address everything? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html