Let's say our idea is wrong, impossible and bad. If the server can not do it by unlang, is there any module or any workaround for such a thing (Proxy rejected packets)? On 11 July 2016 at 18:35, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 11, 2016, at 10:56 AM, Ibrahim Almahfooz < ibrahim.nezar@gorannet.net> wrote:
Thank you Alan for your answer however I will be waiting for Stefan help regarding the other method. We need such a setup to be implemented temporary for two-three months then we will remove it.
The server cannot turn a Reject into a proxied packet via unlang.
It doesn't matter if the setup is temporary. Your requirements are based on bad ideas about security. Your design is wrong. It adds complexity, and doesn't add security.
What you want to do is impossible. Fix your design to follow the recommendations given on this list.
Alan DeKok.
--