thank you for your answer

as i explain, i read the man unlang times but cannot figure out how to use it and Alan asked me the specific case

>at the line 529 + 530, i should to send back to NAS server with the Acces Reject with attribute h323-return-code == "h323-return-code=2" not 0
>
..
>520 Using Post-Auth-Type Reject
>521 +- entering group REJECT {...}
>522 [attr_filter.access_reject] expand: %{User-Name} -> 0873000001
>523 attr_filter: Matched entry DEFAULT at line 11
>524 ++[attr_filter.access_reject] returns updated
>525 Delaying reject of request 9 for 1 seconds
>526 Going to the next request
>527 Waking up in 0.9 seconds.
>528 Sending delayed reject for request 9
>529 Sending Access-Reject of id 206 to 172.26.0.8 port 1645
>530 h323-return-code == "h323-return-code=0"

and the man unlang says the unlang is used in the configuration file --> radiusd.conf

and there are some blocks in radiusd.conf such as listen block, module block, log block ...

where should i put the unlang

as your suggestion the Post-Auth-Type REJECT. but i dont know where to put it

so put it at the end of the radiusd.conf

$INCLUDE sites-enabled/

        Post-Auth-Type REJECT {
                h323-return-code := "h323-return-code=2"
        }

but it doesnt work :(