Rejecting User By their Calling-Station-Id (Mac Address)

Alan DeKok aland at deployingradius.com
Tue Dec 15 08:36:28 CET 2009


Alex M wrote:
> Hey all, i'm coming back here w/ my old question of how to reject users
> based on their MAC address... but now im running FR 2.x.x
> 
> So, we have trial access for free, and some people figured that they can
> re-register new accounts for trial all over again and have fun this way.
> Well thats not fun for us so we trying to figure out what we can do to
> reject reqyest from their machines no matter what name they put in. So
> maybe some one can help me out here.

  Create a table called "blocked MACs", and put the MAC addresses in
there.  Then, in the "authorize" section, do:

  if (Calling-Station-Id == "%{sql: SELECT ....}") {
      reject
  }

  Fix the SQL statement to SELECT the row containing the Calling-Station-Id.

  Alan DeKok.



More information about the Freeradius-Users mailing list