Scott Lambert wrote:
If I need to look deeper into the problem on my own, I will be happy to do so. If I have, once again, picked on a piece of the code that has no bearing in my issue, please don't be afraid to tell me I am being stupid.
I don't think I have any issues doing that... ...
That's all well and good. However, perhaps the problem comes when we get to recv_one_packet() in radclient.c and unconditionally set reply->dst_ipaddr = client_ipaddr which is apparantly due to "udpfromto issues."
/* * udpfromto issues. We may have bound to "*", * and we want to find the replies that are sent to * (say) 127.0.0.1. */ reply->dst_ipaddr = client_ipaddr;
Commenting that line out makes my jail work.
OK, I see why that works for radclient. I recall, though, that the original issue you ran into was with proxying. Do you still have an issue with that, or does this one-line fix address everything? Alan DeKok.