RE: log request to Freeradius server from unknown client
Hi, David! I am sorry , but i am already have all my radius client in mysql radius\nas database. I don`t want to allow unknown client connect to my Radius server? I just want to log this connection attempt to log file. Thanks. here is debug(skipped some things) =============== freeradius -X FreeRADIUS Version 2.0.4, for host i486-pc-linux-gnu, built on Sep 7 2008 at 23:35:34 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. Starting - reading configuration files ... including configuration file /etc/freeradius/radiusd.conf including configuration file /etc/freeradius/proxy.conf including configuration file /etc/freeradius/clients.conf including configuration file /etc/freeradius/snmp.conf including configuration file /etc/freeradius/sql.conf including configuration file /etc/freeradius/sql/mysql/counter.conf including configuration file /etc/freeradius/sqlippool.conf including configuration file /etc/freeradius/sql/mysql/ippool.conf including configuration file /etc/freeradius/policy.conf including files in directory/etc/freeradius/sites-enabled/ including configuration file /etc/freeradius/sites-enabled/default including dictionary file /etc/freeradius/dictionary main { prefix = "/usr" localstatedir = "/var" logdir = "/var/log/freeradius" libdir = "/usr/lib/freeradius" radacctdir = "/var/log/freeradius/radacct" Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } radiusd: #### Loading Virtual Servers #### server { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = yes require_strong = yes with_ntdomain_hack = no } Module: Instantiating sql sql { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "radius" password = "test123" radius_db = "radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace.sql" readclients = yes Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. =================================================== Ignoring request to authentication address * port 1812 from unknown client ===========
Yacuk wrote:
I am sorry , but i am already have all my radius client in mysql radius\nas database. I don`t want to allow unknown client connect to my Radius server? I just want to log this connection attempt to log file.
Edit the source code. Logging unknown clients could turn into a DoS attack. Alan DeKok.
Hi,
Yacuk wrote:
I am sorry , but i am already have all my radius client in mysql radius\nas database. I don`t want to allow unknown client connect to my Radius server? I just want to log this connection attempt to log file.
Edit the source code.
Logging unknown clients could turn into a DoS attack.
could you do something sicker than that - such as edit the dynamic-clients config and , instead of doing an SQL query, actually use the logging component of FR to do the task? its sick...but it would work. [alternatively, use firewalls so only valid clients can talk to the RADIUS server] alan
Alan Buxey wrote:
could you do something sicker than that - such as edit the dynamic-clients config and , instead of doing an SQL query, actually use the logging component of FR to do the task? its sick...but it would work.
Uh... yes. Since you showed me I'm wrong, you get a beer the next time we meet. Alan DeKok.
participants (3)
-
Alan Buxey -
Alan DeKok -
Yacuk