On Wed, Feb 15, 2012 at 2:47 PM, <justin76@mac.com> wrote:
Any suggestions?
If you didn't get any response, it's usually either: (1) the answer was already given, OR (2) your question was not clear, or you're asking something that doesn't make sense, OR (3) you were given sugesstions, but choose to ignore it
On Feb 14, 2012, at 3:47 PM, justin76@mac.com wrote:
Can this be achived for only accounting start requests? So the check would be only when a new accounting session starts, ongoing sessions shouldn't be checked.
Quoting Phil's mail: " Freeradius can perform arbitrary processing, to ignore or accept packets. You need to: 1. Write down a policy showing which requests you want to permit, based on which attributes 2. Translate that policy into a FreeRADIUS config. See the "man unlang" page, and doc/* for info on all this. " As long as you can defince the policy, the rest should be easy. If you want to filter accounting start only, look at the attribute Acct-Status-Type (see dictionary.rfc2866). IMHO it would be useless though. If an acct-stop arrive without any previous record, FR by default will just insert a new record to radacct using whatever limited info available on that acct-stop packet. You CAN change this behavior though. Again, the key point is whether you're able to define a clear policy or not. -- Fajar