accel-ppp.git/accel-pppd/radius/radius.c, branch marekm72-patch-1-printf-hHigh performance PPTP/L2TP/SSTP/PPPoE/IPoE server for Linux (mirror of https://github.com/marekm72/accel-ppp.git)
https://git.amelek.net/marekm72/accel-ppp.git/atom?h=marekm72-patch-1-printf-h2026-02-02T14:54:12+00:00Merge pull request #294 from AndriiFullroot/VyOS_REBASE_Stages2026-02-02T14:54:12+00:00Denys Fedoryshchenkodenys.f@collabora.com2026-02-02T14:54:12+00:00urn:sha1:2c7e208b6a674f729a28b8597adcf3422a5d06f0
netlink: Added VRF supportnetlink: Added VRF support2026-01-30T03:25:54+00:00Andrii Melnychenkoa.melnychenko@vyos.io2026-01-07T12:14:11+00:00urn:sha1:d4f230af1cc31447289a7e30640a471a818cfd69
Added VRF support to the iproute routines.
Updated iproute* calls in the ipoe, radius, and dhcpv6 code.
Signed-off-by: Andrii Melnychenko <a.melnychenko@vyos.io>
Update accel-pppd/radius/radius.c2026-01-27T14:59:09+00:00Denys Fedoryshchenkonuclearcat@nuclearcat.com2026-01-27T14:59:09+00:00urn:sha1:f8adaa40d143a76a28521dbd8d0e85b104f50b97
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>Update accel-pppd/radius/radius.c2026-01-27T14:59:00+00:00Denys Fedoryshchenkonuclearcat@nuclearcat.com2026-01-27T14:59:00+00:00urn:sha1:8e663fa5cbf1f9666df1978560da9767adf747b6
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>radius: Add optional validation of Framed-Route2026-01-24T18:14:44+00:00Denys Fedoryshchenkodenys.f@collabora.com2026-01-24T18:13:41+00:00urn:sha1:027bff94665e3e9779e34117947f0e0bec1eb8b6
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
radius: Fix buggy Framed-Route parsing2026-01-24T18:07:47+00:00Denys Fedoryshchenkodenys.f@collabora.com2026-01-24T18:07:47+00:00urn:sha1:a4c79494f2b8aefecb4d4db25f7c3a7442a4f0fd
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
dae-allowed: Remove nagging about making option mandatory2026-01-24T16:20:37+00:00Denys Fedoryshchenkodenys.f@collabora.com2026-01-24T16:20:37+00:00urn:sha1:1addd77cf73bef943175648d534cce2e1a66497f
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
radius: Implement DM/CoA security hardening by restricting source ip addresses2025-12-22T22:48:30+00:00Denys Fedoryshchenkodenys.f@collabora.com2025-12-21T08:44:22+00:00urn:sha1:2550fe6cd9de9734cbc41179931fd029d8d132d6
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
Add RADIUS blast attack protection with Message-Authenticator2025-07-01T11:32:13+00:00Denys Fedoryshchenkodenys.f@collabora.com2025-06-25T19:31:08+00:00urn:sha1:1ce263f13ac0b3aed3b14b4a9bb6a51afe210684
Recently FreeRadius started to complain accel-ppp doesn't pass
BlastRADIUS check. This commit fixes that.
This commit implements protection against RADIUS blast attacks
by adding support for the Message-Authenticator attribute in
Access-Request packets. This security enhancement helps
prevent unauthorized access attempts and replay attacks
on RADIUS authentication.
- Added new configuration option `blast-protection=1`
in [radius] to enable Message-Authenticator inclusion
- Implemented HMAC-MD5 calculation for
Message-Authenticator attribute (RFC 2869)
- Modified packet building to include 18-byte Message-Authenticator
attribute when enabled
- Updated packet structure to support signing with shared secret
Enable blast protection by adding to the `[radius]` section:
```
blast-protection=1
```
When enabled, all Access-Request packets will include a
Message-Authenticator attribute with HMAC-MD5 signature,
providing cryptographic integrity verification and protection
against packet modification attacks.
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
radius: implemented accounting delay option (acct-delay-start)2023-01-27T08:05:26+00:00Dmitry Kozlovxeb@mail.ru2023-01-27T08:05:26+00:00urn:sha1:cc8f2bada5635768d425e2fa2bafb095acda8ca9