hi, okay - updated to latest CVS after I saw the CVS log messages regarding this proxying issue. things look a little better but at the end the server is dead - unable to respond to any legitimate requests - (ie even simple local non proxy ones) latest output: Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Proxy-State = 0x33 Proxying request 0 to home server 10.1.2.3 port 1812 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Going to the next request Waking up in 0.9 seconds. Waking up in 28.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 26.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 23.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 20.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 17.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 14.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 11.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 8.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 5.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 32772, id=3, length=66 Sending duplicate proxied request to home server 10.1.2.3 port 1812 - ID: 108 Sending Access-Request of id 108 to 10.1.2.3 port 1812 User-Name = "testuser1@testdomain.org" User-Password = "testing123" NAS-IP-Address = 10.1.2.2 NAS-Port = 1812 Huntgroup-Name = "testhunt" Realm = "testrealm" Realm = "testrealm" Proxy-State = 0x33 Waking up in 2.9 seconds. Rejecting request 0 due to lack of any response from home server 10.1.2.3 port 1812 Found Post-Proxy-Type +- entering group Fail expand: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radius/radacct/127.0.0.1/detail-20080105 rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/127.0.0.1/detail-20080105 expand: %t -> Sat Jan 5 13:10:19 2008 rlm_detail: Freeradius-Proxied-To = 10.1.2.3 ++[detail] returns ok There was no response configured: rejecting request 0 Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> testuser1@testdomain.org attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Sending Access-Reject of id 3 to 127.0.0.1 port 32772 Finished request 0. Going to the next request WARNING: Marking home server 10.1.2.3 port 1812 as zombie (it looks like it is dead). Waking up in 1.9 seconds. then nothing out of the server. PS a little note. there are 2 other home servers configured in the proxy realm that this request could go to - the server at no point seems to want to talk to the other 2 home servers either. alan