Disconnect-Request packet

Alan DeKok aland at ox.org
Fri Jul 29 19:10:58 CEST 2005


Paul.Hampson at PObox.com (Paul Hampson) wrote:
> This last point seems trivial until you try to proxy backwards
> through a chain you have only the last hop of, and the last hop
> doesn't neccessarily know what the previous hop was.

  Exaclty.  Coupled with the problem that the server is *supposed* to
validate the disconnect request by running it through the *proxying*
code, to see if it came FROM the site an Access-Request would have
been proxied TO.

  Yuck.

  Alan DeKok.




More information about the Freeradius-Users mailing list