silently drop packet (access-request)

2006-02-15 Thread Andriy Gapon
Alan DeKok wrote: [snip] So long as you're following the GPL, it's your business. [snip] If you want to control the server, you have source. You can edit it yourself. The issue appears to be that you want the server to do something special in your site, and you also want to force

silently drop packet (access-request)

2006-02-09 Thread Andriy Gapon
Alan, thank you very much for your reply. Sorry if my reply breaks message threading for you - I am replying based on the web-archive as I don't receive this list by email. Alan DeKok wrote: Andriy Gapon avg at icyb.net.ua wrote: Is there a way to force a silent drop of a packet instead of

Re: silently drop packet (access-request)

2006-02-09 Thread Alan DeKok
Andriy Gapon [EMAIL PROTECTED] wrote: I think that it would be nice if list of such situations could be configurable and extensible. No. Dropping the packet is a security decision and there is no reason to make it configurable. For example, there are some RADIUS-related solutions/drafts

silently drop packet (access-request)

2006-02-09 Thread Andriy Gapon
Alan, thanks your answers. You give quite good reasons, but somehow they don't satisfy me :-) (they don;t have to, of course). If you don't mind, let me ask you some a little bit more general questions: 1. What is FreeRADIUS (as a project) general feeling and attitude towards entities that use

Re: silently drop packet (access-request)

2006-02-09 Thread Alan DeKok
Andriy Gapon [EMAIL PROTECTED] wrote: 1. What is FreeRADIUS (as a project) general feeling and attitude towards entities that use FreeRADIUS as a RADIUS server in conjunction with their own private (closed-source) modules ? So long as you're following the GPL, it's your business. This

silently drop packet (access-request)

2006-02-08 Thread Andriy Gapon
Is there a way to force a silent drop of a packet instead of sending Access-Reject ? I am interested in both doing this through configuration file(s) and doing this from a module (e.g. with some special return code or attribute). On a somewhat related note: is there way to make FreeRADIUS server