I've just added a "listen" directive to the current CVS snapshot.
This lets the administrator control the IP address, port, and packet
types which the server listens for.
e.g. You can make the server listen only to authentication requests,
but not accounting requests.
e.g. You can make the server listen on 2 IP's of a machine, but not
a third.
The old "bind_address" and "port" configurations still work, but
"listen" is better. You can comment those old entries, and do things
like:
listen {
ipaddr = 127.0.0.1
port = 1812
type = auth
}
listen {
ipaddr = 127.0.0.1
port = 1813
type = acct
}
listen {
ipaddr = 1.2.3.4
port = 1812
type = auth
}
This accepts auth+acct packets from localhost, but only auth packets
sent to 1.2.3.4.
Happily, this feature also simplifies some of the bad code in the
server core, so it's a nice change.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
