<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
{font-family:"\@MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Dear all,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I know that this is FreeRadius forum, but since ICRadius
forum is almost dead i thought someone can help me, here. It turns out this
morning that I have over 1,800,000 records in my RadAcct table with blank
username. Probably I am under attack. The record is so much different than
regular user records authenticated through NAS server. In each record
AcctSessionTime=1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0
style='border-collapse:collapse'>
<tr>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><b><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;font-weight:bold'>Attack<o:p></o:p></span></font></b></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><b><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;font-weight:bold'>Regular<o:p></o:p></span></font></b></p>
</td>
</tr>
<tr>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>NASIPAddress<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>A.B.C.D<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>A.B.C.D<o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>NASPortType<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Virtual<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Async<o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>AcctAuthentic<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>local<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Radius<o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>CalledStationId<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>first 10 char of A.B.C.D<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Regular phone number<o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>AcctTerminateCause<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Lost-Carrier<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Usually User-Request<o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Service-Type<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>NAS-Prompt-User<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Framed-User<o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>NASPortId<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>122, 123<o:p></o:p></span></font></p>
</td>
<td width=197 valign=top style='width:2.05in;padding:0in 5.4pt 0in 5.4pt'>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>*<o:p></o:p></span></font></p>
</td>
</tr>
</table>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Can anyone tell me, what is going on? How can I stop this
attacker?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>BR, Baynaa.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
</div>
</body>
</html>