> Chuang Okis wrote:
> > I think you misunderstanding my point a bit. Maybe I don't express it
clear
> enough.
> > I only need fixing my *source port* instead of random port, I don't care
IP
> address at all.
>
> Ah, OK.
>
> > Actually, due to some maintenance issue, we want to know that could we
fix
> our arc port while our freeRADIUS AS A ROAMING CENTER. We are trying
> reducing the number of firewall logs. That's why we want to keep src port
the
> same.
>
> No there's no way to fix the source port.
>
> Even if you did, the server would dynamically open *new* source ports
> when it gets busy. That's how UDP applications work.
>
Ok, now I've saved lots of time finding any possible way to do this.
Thanks for being so concise about this issue.
> It should be OK to have a firewall rule which allows packets FROM the
> proxy IP, TO the home server IP and home server port. Adding the source
> port is pretty much pointless.
>
> Alan DeKok.
>
Hmm. That sounds making sense. I'll discuss with our firewall policy
manager about it.
However, thank you very much Alan.
Okis.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
