[EMAIL PROTECTED] (Paul Hampson) wrote:
> This last point seems trivial until you try to proxy backwards
> through a chain you have only the last hop of, and the last hop
> doesn't neccessarily know what the previous hop was.

  Exaclty.  Coupled with the problem that the server is *supposed* to
validate the disconnect request by running it through the *proxying*
code, to see if it came FROM the site an Access-Request would have
been proxied TO.

  Yuck.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to