The rlm_attr_filter module has been updated with some new functionality. o Each a/v pair in the reply is now compared against *ALL* rules for that attribute. This will allow multiple rules for the same attribute, IE:
... Idle-Timeout >= 800, Idle-Timeout <= 28800, ... The a/v pair must pass *ALL* rules to be allowed. If there are three rules for the attribute, and it passes 2 and fails 1, the attribute will not be allowed. o Two new operators have been added, to allow better wildcarded permit and deny rules: =* Always report pass !* Always report fail This allows a shortcut to always allow or deny an attribute. IE: ... Reply-Message *= ANY Ascend-Data-Filter *= ANY Proxy-State *= ANY ... This requires less overhead than the regexpression workaround that was in place previously, and is more portable. --- The documentation in 'doc/rlm_attr_filter' has been updated to reflect this, as well as the sample 'raddb/attrs' file. If any questions or problems are noted regarding this change, please post them to the list. -Chris -- \\\|||/// \ StarNet Inc. \ Chris Parker \ ~ ~ / \ WX *is* Wireless! \ Director, Engineering | @ @ | \ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\------------------------------------------------------ \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html