>
> If they're using something that's always the same, then create a Handler
> that matches and ignores these packets (although you may want to log
> them to make sure they're doing their job etc).

I'm already doing this (here's my Session config & my Accounting
handler(s)):
I *MUST* respond to the NAS to indicate that I got the packets, so
discarding outright doesn't help.  The best approach that I found to what I
want to do was the AuthBy TEST module :)  If I'm wrong, someone, please
correct me! :)

<SessionDatabase SQL>
        DBSource        dbi:mysql:radius
        DBUsername      XXX
        DBAuth          XXX

        AddQuery  insert into RADONLINE \
        (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, \
        FRAMEDADDRESS, PORTTYPE, SERVICETYPE) values ('%n', '%N', \
        '%{NAS-Port}', '%{Acct-Session-Id}', %{Timestamp}, \
        '%{Framed-IP-Address}', '%{Port-Type}', '%{Service-Type}')

        DeleteQuery  delete from RADONLINE where USERNAME='%n' and
NASIDENTIFIER
='%N' and NASPORT='%{NAS-Port}'
</SessionDatabase>

# Accounting handlers
#
# Log details for @eisa.com users only from @eisa.com to file from
# border1.cyberus.ca 209.195.69.147
<Handler Acct-Status-Type =
/Start|Stop/,NAS-IP-Address=209.195.69.147,User-Name
=/.*\@eisa.com/>
        RewriteUsername s/^([^@]+).*/$1/
        <AuthBy TEST>
        </AuthBy>
        AcctLogFileName %L/acct/eisa.com/%C/detail
</Handler>

# Accept the rest of the entries from 209.195.69.147, but don't log them
<Handler Acct-Status-Type = /Start|Stop/,NAS-IP-Address=209.195.69.147>
#        RewriteUsername s/^([^@]+).*/$1/
        <AuthBy TEST>
        </AuthBy>
#       AcctLogFileName %L/acct/eisa.com/7552-details
</Handler>

# Ignore UUnet test packets
<Handler User-Name = "RejectMePls", Acct-Status-Type = Start,
Acct-Session-Id =
"dontTryMacth">
        <AuthBy TEST>
        </AuthBy>
</Handler>

# Accept start and stop for the rest.
<Handler Acct-Status-Type = /Start|Stop/>
        RewriteUsername s/^([^@]+).*/$1/
        <AuthBy TEST>
        </AuthBy>
        AcctLogFileName %L/acct/eisa.com/%C/detail
</Handler>


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to