pre-proxy automatically added "NAS-IP-Address"

Phil Mayers p.mayers at imperial.ac.uk
Thu Oct 21 09:53:21 CEST 2010


On 10/21/2010 03:34 AM, ichiro tanaka wrote:
>
> Hi.
>
> i have a problem proxy.
> Proxying to auth-server, and "NAS-IP-Address" was automatically added by proxy.
> can I stop it?

It was probably added by the "preprocess" module, if memory serves.

Why would you want to stop it?

If you do, just remove the "preprocess" module from the "authorize" 
section - but it does a lot of other processing and cleanups too.

The better option is to use attr_filter in the "pre-proxy" section, like so:

pre-proxy {
   attr_filter.preproxy
}

...then in /etc/raddb/attrs.pre-proxy, edit the sample entries to 
permit/deny attributes you want/don't want to send.

You probably want the postproxy filter too, in case your upstream proxy 
sends you junk you can't / don't want to handle.



More information about the Freeradius-Users mailing list