Control reject delay per-request?
    Alan DeKok 
    aland at deployingradius.com
       
    Wed Feb 26 19:00:03 CET 2014
    
    
  
Phil Mayers wrote:
> We have a radius virtual server that takes macauth requests. We know for
> sure it won't receive user traffic and/or dictionary attacks.
> 
> But it's in the same process as another, which might.
> 
> Can we set a control: item or similar to set the reject delay to some
> requests and not others? I'd rather not break it out into a separate
> process for this sole reason.
  Right now, no.
  But it could be done via a simple patch.  :)
  See src/main/event.c, look for "request->root->reject_delay".  There's
only one place which uses it to set the reject delay.
  Honestly, this is the kind of thing which *could* be done on a
per-client level.  It would be better to do that than to use an
attribute in the control list.
  Alan DeKok.
    
    
More information about the Freeradius-Users
mailing list