On Tue, Dec 03, 2002 at 10:51:44PM -0500, Alan DeKok wrote:
> 
>   Yes.  It's a VERY bad idea to allow any machine on the Internet to
> send packets to your radius server.

I totally agree, which is why a firewall exists in front of the RADIUS
server.  Maybe a hack using DynDNS is possible, however the NAS in
question doesn't currently support this.  Typical sub $200 Taiwanese
802.11 "Hotspot-in-a-box" server with a huge OEM tree, still haven't
found who writes the firmware/OS for the device ;\

>   I will probably refuse any patches which allow 0.0.0.0/0 to work.
> But two client networks for /1, with the same shared secret should
> work.

Yep, thanks.

-- 
Matt Peterson         another.geek.without.a.life
[EMAIL PROTECTED]       http://matt.peterson.org/
-------------------------------------------------

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to