Notes on new listener "type = proxy"

diff --git a/doc/ChangeLog b/doc/ChangeLog
index 8c6f73b..c95b1b9 100644 (file)
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -8,6 +8,11 @@ FreeRADIUS 2.0.2-pre ; $Date$ , urgency=low
        * Added ability send raw attributes via "Raw-Attribute = 0x0102..."
          This is available only debug builds.  It can be used
          to create invalid packets! Use it with care.
+       * Permit "unlang" policies inside of Auth-Type{} sub-sections
+         of the authenticate{} section.  This makes some policies easier
+         to implement.
+       * "listen" sections can now have "type = proxy".  This lets you
+         control which IP is used for sending proxied requests.
 
        Bug fixes
        * Fixed reading of "detail" files.
@@ -22,6 +27,8 @@ FreeRADIUS 2.0.2-pre ; $Date$ , urgency=low
        * Corrected debugging messages in attr_rewrite.
        * Corrected generation of State attribute in EAP.  This
          fixes the "failed to remember handler" issues.
+       * Fall back to DEFAULT realm if no realm was found.
+         Based on a patch from Vincent Magnin.
 
 FreeRADIUS 2.0.1 ; Date: 2008/01/22 13:29:37  , urgency=low
        Feature improvements

diff --git a/raddb/radiusd.conf.in b/raddb/radiusd.conf.in
index 7578728..1756db7 100644 (file)
--- a/raddb/radiusd.conf.in
+++ b/raddb/radiusd.conf.in
@@ -208,6 +208,22 @@ max_requests = 1024
 #  on the command line.
 #
 listen {
+       #  Type of packets to listen for.
+       #  Allowed values are:
+       #       auth    listen for authentication packets
+       #       acct    listen for accounting packets
+       #       proxy   IP to use for sending proxied packets
+       #
+       type = auth
+
+       #  Note: "type = proxy" lets you control the source IP used for
+       #        proxying packets, with some limitations:
+       #
+       #    * Only ONE proxy listener can be defined.
+       #    * A proxy listener CANNOT be used in a virtual server section.
+       #    * You should probably set "port = 0".
+       #    * Any "clients" configuration will be ignored.
+
        #  IP address on which to listen.
        #  Allowed values are:
        #       dotted quad (1.2.3.4)
@@ -225,13 +241,6 @@ listen {
        #       0 means "use /etc/services for the proper port"
        port = 0
 
-       #  Type of packets to listen for.
-       #  Allowed values are:
-       #       auth    listen for authentication packets
-       #       acct    listen for accounting packets
-       #
-       type = auth
-
        #  Some systems support binding to an interface, in addition
        #  to the IP address.  This feature isn't strictly necessary,
        #  but for sites with many IP addresses on one interface,