Failed to install socket filter

brad brad at bradandkim.net
Mon Nov 3 22:42:15 CST 2003


OK, thanks.  In the future I will give that a try.

Thanks,

Brad

-----Forwarded Message-----
> From: Gerald Combs <gerald at ethereal.com>
> To: brad <brad at bradandkim.net>
> Cc: kclug at kclug.org
> Subject: Re: Failed to install socket filter
> Date: Mon, 03 Nov 2003 14:31:04 -0600
> 
> On Mon, 3 Nov 2003, Gerald Combs wrote:
> 
> > Which RADIUS server are you using?  Does it have an option to bind to a
> > specific IP address?  Since RADIUS runs over UDP, it's possible for the
> > server to open a new socket when sending replies.  In your case, the reply
> > socket is apparently binding to the first available IP address (.1).  
> > This is arguably a bug in the RADIUS server; it ought to bind to the
> > inbound address.  To get around this, you can set up the RADIUS server to
> > support listening on a specific IP address.
> 
> I forgot -- you might be able to force the RADIUS server to use .2 as your
> outgoing address by fooling with your routing table:
> 
>   route add -host x.y.z.q gw 10.0.1.2 
> 
> This will force traffic going to x.y.z.q (in your case this is the RADIUS
> client address) to be sourced from 10.0.1.2 by default.  This is a bit of
> a hack, though, and you really should try to bind the RADIUS server to
> 10.0.1.2 explicitly.
> 
> 
> 




More information about the Kclug mailing list