MSBlaster and Freeradius

2004-01-07 Thread Josh Howlett
We have been experiencing problems with the MSBlaster worm and Freeradius. The Freeradius daemon is running on a (homebrew) NAS that also terminates VPN sessions. If a VPN user is infected, it seems that the MSBlaster traffic prevents FreeRADIUS from operating correctly. The exact mode

RE: MSBlaster and Freeradius

2004-01-07 Thread Drew Weaver
This homebrew nas is the same box that is running your radius server? -Drew -Original Message- From: Josh Howlett [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 07, 2004 11:10 AM To: [EMAIL PROTECTED] Subject: MSBlaster and Freeradius We have been experiencing problems

RE: MSBlaster and Freeradius

2004-01-07 Thread Josh Howlett
PROTECTED] Subject: MSBlaster and Freeradius We have been experiencing problems with the MSBlaster worm and Freeradius. The Freeradius daemon is running on a (homebrew) NAS that also terminates VPN sessions. If a VPN user is infected, it seems that the MSBlaster traffic prevents FreeRADIUS from

Re: MSBlaster and Freeradius

2004-01-07 Thread Alan DeKok
Josh Howlett [EMAIL PROTECTED] wrote: My best guess is that the MSBlaster UDP from the user(s) is swamping the kernel, resulting in RADIUS UDP packets getting lost. Yup. The kernel has a limited queue for incoming packets. Has anyone else seen this, or have any suggestions? Put a

RE: MSBlaster and Freeradius

2004-01-07 Thread Drew Weaver
: MSBlaster and Freeradius Josh Howlett [EMAIL PROTECTED] wrote: My best guess is that the MSBlaster UDP from the user(s) is swamping the kernel, resulting in RADIUS UDP packets getting lost. Yup. The kernel has a limited queue for incoming packets. Has anyone else seen this, or have any