> Although I haven't looked into this, Livingston boxes did not
> send the secret with accounting packets. Therefore in the 1.16
> Ref code, if you could spoof a source IP address, you could send
Do they really do that? That would make it pretty easy for your more
intellignet users to defeat radius accounting. If it really is that way,
I'd be surprised if there weren't tools already circulating to spoof
accounting packets.
------------------------------------------------------------------
Jon Lewis <jlewis@fdt.net> | Unsolicited commercial e-mail will
Network Administrator | be proof-read for $199/hr.
________Finger jlewis@inorganic5.fdt.net for PGP public key_______