Dear Paul Jenner,

It's  not  a  bug. In case of UDP, if you bind service to all interfaces
and  there  are  2  interfaces on the same network there is no guarantee
reply  packet  will  be sent from interface incoming packet was sent to.
Because  replay  packet  will always be sent from interface according to
routing table (if there are 2 records for same network with same metrics
first one will be chosen). It's expected behavior.

Program need some code to specially change binding interface in order to
process  request  as you expect it to do. In case of FreeRADIUS it's not
trivial,  because  interface  is  shared  between  multiple  threads and
changing interface binding may affect another threads. So, best solution
for you is to review your network configuration.


--Friday, February 7, 2003, 7:00:29 PM, you wrote to [EMAIL PROTECTED]:

PJ> Hi.

PJ> I am seeing an issue with freeradius 0.8.1 on Red Hat 8.0 where RADIUS
PJ> responses are coming out of a different virtual interface to the
PJ> interface they are made to. I couldn't see anything in the doc so
PJ> hopefully someone on this list can help.

PJ> In more detail:

PJ> * my RADIUS server has a real interface on IP X.X.X.X and a virtual
PJ> interface on IP Y.Y.Y.Y
PJ> * both interfaces are on the same subnet
PJ> * the software is freeradius 0.8.1 compiled on Red Hat 8.0
PJ> * it is configured with "bind_address = *" to listen on both interfaces
PJ> * when RADIUS requests are made to IP X.X.X.X, the responses come back
PJ> from IP X.X.X.X
PJ> * however when requests are made to IP Y.Y.Y.Y, the responses still come
PJ> back from IP X.X.X.X
PJ> * hence they are dropped by firewall as unestablished outgoing
PJ> connections
PJ> * UDP responses on virtual interfaces do work with this kernel as ISC
PJ> bind is able to respond to DNS UDP requests on the same IP as the
PJ> connection is made to

PJ> Am I doing something wrong in the config or is this a bug?

PJ> Thanks for any help on this,

PJ> Paul

PJ> Paul Jenner
PJ> ioko365 Ltd.
PJ> T: +44 (0)1904 438000 x353
PJ> M: +44 (0)7979 598170
PJ> E: [EMAIL PROTECTED]
PJ> W: http://www.ioko365.com/ 

PJ> - 
PJ> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
~/ZARAZA
���� ���� �� �������� �����-������ ������, �� ��� ����� �� ������� ��� ���������. 
(����)


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to