26 Feb
2014
26 Feb
'14
1 p.m.
Phil Mayers wrote:
We have a radius virtual server that takes macauth requests. We know for sure it won't receive user traffic and/or dictionary attacks.
But it's in the same process as another, which might.
Can we set a control: item or similar to set the reject delay to some requests and not others? I'd rather not break it out into a separate process for this sole reason.
Right now, no. But it could be done via a simple patch. :) See src/main/event.c, look for "request->root->reject_delay". There's only one place which uses it to set the reject delay. Honestly, this is the kind of thing which *could* be done on a per-client level. It would be better to do that than to use an attribute in the control list. Alan DeKok.