Message: 2 Date: Fri, 17 Jun 2005 13:20:06 -0400 From: "Alan DeKok" <aland@ox.org> Subject: Re: corrupt UDP packets sent to proxy To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>> Message-ID: <20050617172007.F3ED716FAB@mail.nitros9.org>> "Taylor, Graham" <GrahamTaylor@michaelpage.com>> wrote:
Hi People, I hope you can shed some light on a problem I am having with freeradius acting as a proxy. As you can see the packet below has a corrupt UDP header
The kernel creates the UDP header, including checksum. If it's wrong, there's little FreeRADIUS can do.
Alan I agree that the kernel creates the UDP header normally, I am concerned that FreeRADIUS is forwarding the packet to the proxy without re-calculating the UDP header. This would explain why the behaviour is different when proxying than when using radtest.
If I use radtest then the packet is fine and I get authenticated, the problem only occurs when the request is proxied out, all of the packets forwarded to the secondary radius server have the UDP checksum error,
I've never seen that, and I'm not sure why it would happen.
Alan DeKok.
"Taylor, Graham" <GrahamTaylor@michaelpage.com> wrote:
Alan I agree that the kernel creates the UDP header normally, I am concerned that FreeRADIUS is forwarding the packet to the proxy without re-calculating the UDP header.
Maybe you misunderstood. There is NO CODE IN FREERADIUS to calculate the UDP header. None. Zip. Nada. Zilch. It's ALWAYS handled by the kernel. Alan DeKok.
participants (2)
-
Alan DeKok -
Taylor, Graham