Re[2]: RADIUS response from incorrect interface

2003-02-07 Thread 3APA3A 
Dear Alan DeKok,

If he really needs FreeRADIUS to be bound to both interfaces it will not
help (I do not see situation it may be useful).

But  it  could  be  nice to change code to bind FreeRADIUS to IP address
packet  was  received  instead of IP from configuration on sending reply
packet...  On  multi-homed  hosts with few gateways (for example if some
kind  of load balancing is used) it can prevent FreeRADIUS from replying
from wrong IP. Of cause, situation is quite rare.

--Friday, February 7, 2003, 1:58:38 PM, you wrote to [EMAIL PROTECTED]:

AD Paul Jenner [EMAIL PROTECTED] wrote:
 I am seeing an issue with freeradius 0.8.1 on Red Hat 8.0 where RADIUS
 responses are coming out of a different virtual interface to the
 interface they are made to. I couldn't see anything in the doc so
 hopefully someone on this list can help.

AD   Read 'radiusd.conf', and look for IP address

AD   Alan DeKok.

AD - 
AD List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
~/ZARAZA
Ñýð Èñààê Íüþòîí îòêðûë, ÷òî ÿáëîêè ïàäàþò íà çåìëþ. (Òâåí)


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Re[2]: RADIUS response from incorrect interface

2003-02-07 Thread Alan DeKok 
3APA3A [EMAIL PROTECTED] wrote:
 But  it  could  be  nice to change code to bind FreeRADIUS to IP address
 packet  was  received  instead of IP from configuration on sending reply
 packet...

  That's difficult to do with UDP sockets.  We can perform a call to
bind() for every request, but that's very expensive.

  Or, we can update the 'bind_address' functionality to be more like
Apache, and to allow a list of addresses.  This requires some minor
code changes.

  On  multi-homed  hosts with few gateways (for example if some
 kind  of load balancing is used) it can prevent FreeRADIUS from replying
 from wrong IP. Of cause, situation is quite rare.

  Exactly.  People have lived quite well with a single-IP RADIUS
server for quite a while.  There isn't a huge need for having it
listen on multiple IP's.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html