logging unknown clients

2008-09-11 Thread Greg Woods
Is there any way to get the freeradius 2.1 server to log requests coming
from unknown clients? As far as I can tell, these are just silently
discarded. I have read through all the comments on the log section in
radiusd.conf but I don't see anything about this. Is there anywhere else
where the logging capabilities are more fully documented that I just
haven't been able to find?

Thanks,
--Greg


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: logging unknown clients

2008-09-11 Thread tnt
This is deliberately not logged as DoS prevention measure. Such requests
will be reported only in debug mode. Search for Ignoring request in
listen.c.

Ivan Kalik
Kalik Informatika ISP


Dana 11/9/2008, Greg Woods [EMAIL PROTECTED] piše:

Is there any way to get the freeradius 2.1 server to log requests coming
from unknown clients? As far as I can tell, these are just silently
discarded. I have read through all the comments on the log section in
radiusd.conf but I don't see anything about this. Is there anywhere else
where the logging capabilities are more fully documented that I just
haven't been able to find?

Thanks,
--Greg


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: logging unknown clients

2008-09-11 Thread Alan DeKok
Greg Woods wrote:
 Is there any way to get the freeradius 2.1 server to log requests coming
 from unknown clients? As far as I can tell, these are just silently
 discarded.

  Yes.  Attackers can send packets much more quickly than the server can
log them.  Logging unknown client could quickly overload the server.

  You can edit the code to log more messages.  But do this only if you
don't have any untrusted users on your network.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html