preproxy_users doesn't filter attributes

Hi All, I am wondering if anybody has done this, I'm sure it's actually very easy to do, But I'm just not able to get it done :( I need to filter requests coming from my NAS going to my radius server being forwarded to a clients radius server. Now I am able to modify and update attributes,

Re: preproxy_users doesn't filter attributes

It does tend to filter attributes when you use attribute filter ;-) http://freeradius.org/radiusd/man/rlm_attr_filter.html http://wiki.freeradius.org/Attrs Ivan Kalik Kalik Informatika ISP Dana 7/7/2008, Michael da Silva Pereira [EMAIL PROTECTED] piše: Hi All, I am wondering if anybody has

Re: preproxy_users doesn't filter attributes

Hi there, It seems this only affects replies from the Home Server going to my NAS. # attr_filter - filters the attributes received in replies from # proxied servers, to make sure we send back to our RADIUS client # only allowed attributes. attr_filter {

Re: preproxy_users doesn't filter attributes

Because the example is for one in post-proxy section. Try reading again: http://freeradius.org/radiusd/man/rlm_attr_filter.html Ivan Kalik Kalik Informatika ISP Dana 7/7/2008, Michael da Silva Pereira [EMAIL PROTECTED] piše: Hi there, It seems this only affects replies from the Home Server

Re: preproxy_users doesn't filter attributes

Ok this is for anybody else out there having the same question I have regarding this. There is no clear way to separate between which requests (from or to home servers/post-proxy or pre-proxy). So I tried this with success: Add this to the radiusd.conf, I added this under the attr_filter {

Re: preproxy_users doesn't filter attributes

Michael da Silva Pereira wrote: There is no clear way to separate between which requests (from or to home servers/post-proxy or pre-proxy). Huh? What do you mean by that? The pre-proxy section is processed before the request is sent to the home server. The post-proxy section is processed

Re: preproxy_users doesn't filter attributes

It is interesting you say that this stuff is already included, I do not see it in the prepackage version which comes with Ubuntu (hardy). http://packages.ubuntu.com/hardy/i386/freeradius/filelist But I think this is something the maintainers for Ubuntu must update / incorporate Checking the

Re: preproxy_users doesn't filter attributes

Michael da Silva Pereira wrote: It is interesting you say that this stuff is already included, I do not see it in the prepackage version which comes with Ubuntu (hardy). http://packages.ubuntu.com/hardy/i386/freeradius/filelist That's version 1.1.7. Version 2.0 has been out for over 6

Re: preproxy_users doesn't filter attributes

Yes it does :( Looks like the new Hardy is still coming out with 1.1.7 :( Upgrade time :/ Thanks for the help Mike Alan DeKok wrote: Michael da Silva Pereira wrote: It is interesting you say that this stuff is already included, I do not see it in the prepackage version which comes with

Re: preproxy_users doesn't filter attributes

Hi, Michael da Silva Pereira wrote: It is interesting you say that this stuff is already included, I do not see it in the prepackage version which comes with Ubuntu (hardy). http://packages.ubuntu.com/hardy/i386/freeradius/filelist That's version 1.1.7. Version 2.0 has been out for