<feed xmlns='http://www.w3.org/2005/Atom'>
<title>accel-ppp.git/accel-pppd/accel-ppp.conf, branch marekm72-patch-1-printf-h</title>
<subtitle>High performance PPTP/L2TP/SSTP/PPPoE/IPoE server for Linux (mirror of https://github.com/marekm72/accel-ppp.git)
</subtitle>
<id>https://git.amelek.net/marekm72/accel-ppp.git/atom?h=marekm72-patch-1-printf-h</id>
<link rel='self' href='https://git.amelek.net/marekm72/accel-ppp.git/atom?h=marekm72-patch-1-printf-h'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/'/>
<updated>2026-01-24T18:14:44+00:00</updated>
<entry>
<title>radius: Add optional validation of Framed-Route</title>
<updated>2026-01-24T18:14:44+00:00</updated>
<author>
<name>Denys Fedoryshchenko</name>
<email>denys.f@collabora.com</email>
</author>
<published>2026-01-24T18:13:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=027bff94665e3e9779e34117947f0e0bec1eb8b6'/>
<id>urn:sha1:027bff94665e3e9779e34117947f0e0bec1eb8b6</id>
<content type='text'>
Signed-off-by: Denys Fedoryshchenko &lt;denys.f@collabora.com&gt;
</content>
</entry>
<entry>
<title>dae-allowed: Remove nagging about making option mandatory</title>
<updated>2026-01-24T16:20:37+00:00</updated>
<author>
<name>Denys Fedoryshchenko</name>
<email>denys.f@collabora.com</email>
</author>
<published>2026-01-24T16:20:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=1addd77cf73bef943175648d534cce2e1a66497f'/>
<id>urn:sha1:1addd77cf73bef943175648d534cce2e1a66497f</id>
<content type='text'>
Signed-off-by: Denys Fedoryshchenko &lt;denys.f@collabora.com&gt;
</content>
</entry>
<entry>
<title>radius: Implement DM/CoA security hardening by restricting source ip addresses</title>
<updated>2025-12-22T22:48:30+00:00</updated>
<author>
<name>Denys Fedoryshchenko</name>
<email>denys.f@collabora.com</email>
</author>
<published>2025-12-21T08:44:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=2550fe6cd9de9734cbc41179931fd029d8d132d6'/>
<id>urn:sha1:2550fe6cd9de9734cbc41179931fd029d8d132d6</id>
<content type='text'>
Signed-off-by: Denys Fedoryshchenko &lt;denys.f@collabora.com&gt;
</content>
</entry>
<entry>
<title>Add RADIUS blast attack protection with Message-Authenticator</title>
<updated>2025-07-01T11:32:13+00:00</updated>
<author>
<name>Denys Fedoryshchenko</name>
<email>denys.f@collabora.com</email>
</author>
<published>2025-06-25T19:31:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=1ce263f13ac0b3aed3b14b4a9bb6a51afe210684'/>
<id>urn:sha1:1ce263f13ac0b3aed3b14b4a9bb6a51afe210684</id>
<content type='text'>
Recently FreeRadius started to complain accel-ppp doesn't pass
BlastRADIUS check. This commit fixes that.

This commit implements protection against RADIUS blast attacks
by adding support for the Message-Authenticator attribute in
Access-Request packets. This security enhancement helps
prevent unauthorized access attempts and replay attacks
on RADIUS authentication.

- Added new configuration option `blast-protection=1`
  in [radius] to enable Message-Authenticator inclusion
- Implemented HMAC-MD5 calculation for
  Message-Authenticator attribute (RFC 2869)
- Modified packet building to include 18-byte Message-Authenticator
  attribute when enabled
- Updated packet structure to support signing with shared secret

Enable blast protection by adding to the `[radius]` section:
```
blast-protection=1
```

When enabled, all Access-Request packets will include a
Message-Authenticator attribute with HMAC-MD5 signature,
providing cryptographic integrity verification and protection
against packet modification attacks.

Signed-off-by: Denys Fedoryshchenko &lt;denys.f@collabora.com&gt;
</content>
</entry>
<entry>
<title>ci: run tests in alpine vm</title>
<updated>2024-08-23T23:45:58+00:00</updated>
<author>
<name>Sergey V. Lobanov</name>
<email>sergey@lobanov.in</email>
</author>
<published>2024-08-22T15:47:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=3be221b510112a30922b1da2697eaaaca09ebfd5'/>
<id>urn:sha1:3be221b510112a30922b1da2697eaaaca09ebfd5</id>
<content type='text'>
Alpine Linux uses musl libc so now accel-ppp is tested under musl

Currently, Alpine Linux doesn't provide a link to the latest stable version
so direct link to Alpine 3.20 is used

Improved musl support might be used to run on platforms like openwrt
without additional patches
</content>
</entry>
<entry>
<title>workflows: Add CI build in Alpine</title>
<updated>2024-04-09T22:34:05+00:00</updated>
<author>
<name>Denys Fedoryshchenko</name>
<email>denys.f@collabora.com</email>
</author>
<published>2024-04-09T21:59:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=ce3ee7595c1239a20de589c95dd8ccce38ae49e7'/>
<id>urn:sha1:ce3ee7595c1239a20de589c95dd8ccce38ae49e7</id>
<content type='text'>
As we fixed musl compatibility, we can add also basic check
if accel keep working in Alpine Linux

Also update default config, enable connlimit and place it
before pptp, otherwise Alpine generate error:

```
[2024-04-09 22:30:09.911]loader: failed to load 'pptp': Error relocating /usr/local/lib64/accel-ppp/libpptp.so: connlimit_check: symbol not found
```

Signed-off-by: Denys Fedoryshchenko &lt;denys.f@collabora.com&gt;
</content>
</entry>
<entry>
<title>CLI: PPPoE: Add possibility to display inbound interface and service-name in show sessions command</title>
<updated>2023-06-29T17:48:39+00:00</updated>
<author>
<name>Dmitriy Eshenko</name>
<email>dmitriy.eshenko@accel-ppp.org</email>
</author>
<published>2023-06-29T17:48:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=a9e9f3ea0d7d4c48ba402d885372c978d5c75aab'/>
<id>urn:sha1:a9e9f3ea0d7d4c48ba402d885372c978d5c75aab</id>
<content type='text'>
</content>
</entry>
<entry>
<title>radius: implemented accounting delay option (acct-delay-start)</title>
<updated>2023-01-27T08:05:26+00:00</updated>
<author>
<name>Dmitry Kozlov</name>
<email>xeb@mail.ru</email>
</author>
<published>2023-01-27T08:05:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=cc8f2bada5635768d425e2fa2bafb095acda8ca9'/>
<id>urn:sha1:cc8f2bada5635768d425e2fa2bafb095acda8ca9</id>
<content type='text'>
</content>
</entry>
<entry>
<title>auth: add missed man and exmaple config options</title>
<updated>2022-05-13T10:11:48+00:00</updated>
<author>
<name>Vladislav Grishenko</name>
<email>themiron@mail.ru</email>
</author>
<published>2022-05-13T10:11:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=c347e2fbb8ea489242b227fa3f4abc1d233f1a19'/>
<id>urn:sha1:c347e2fbb8ea489242b227fa3f4abc1d233f1a19</id>
<content type='text'>
</content>
</entry>
<entry>
<title>auth: add support challenge-name option for CHAP</title>
<updated>2022-05-13T10:10:10+00:00</updated>
<author>
<name>Vladislav Grishenko</name>
<email>themiron@mail.ru</email>
</author>
<published>2022-05-13T10:10:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/accel-ppp.git/commit/?id=37a4f391f1a4140dfd656aa2e01366686e7380ab'/>
<id>urn:sha1:37a4f391f1a4140dfd656aa2e01366686e7380ab</id>
<content type='text'>
Fine tune commit 39a9eb807ade35cf60edc6f2e209ed74ba1d262f
</content>
</entry>
</feed>
