Accounting NOT broken in v1.0.11 (was: Accounting badly broken in v1.0.11)

[wlan at mac.com]

No worries, we all have those days :)

I figured it wasn't too serious considering we would have heard about  
it already from others. Just like IT professionals, we don't really  
hear from our customers until there are problems. Not many people  
come to the list or forum with "it works great, no complaints" :)

David

On Apr 21, 2008, at 1:05 AM, Gunther Mayer wrote:

> wlan at mac.com wrote:
>> I'm not certain of the problems reported by previously. Gunther,  
>> can you confirm that chilli is indeed getting the responses?  
>> Otherwise, the behavior he describes is, basically, retransmission  
>> doing its job. I have heard reports of v1.0.11 already "in the  
>> wild" without major problems.  You are also encouraged to test the  
>> svn version.
> Hi David,
>
> I carried out the packet dumps again from the box that runs chilli  
> and even though the replies were delivered fine it turns out that  
> it was a firewall rule of mine that dropped them like a hot potato.  
> I had to use the coaport option together with coanoipcheck (because  
> my PoD packets would come through an openvpn tunnel, not from any  
> of the defined radiusservers) so tried to harden my setup by doing  
> the checking in the firewall. Unfortunately in the process I didn't  
> realise that the coaport option also causes all Accounting Requests  
> to be sent from that port which is where my assumptions broke down.
>
> To cut a long story short it was my stupidity rather than your code  
> that caused the mess and the behaviour I saw indeed was just chilli  
> trying to retransmit whatever it never received a reply for. The  
> radauth stuff of course ran flawlessly so that I could log in fine,  
> which is why I never detected the problem when I did my initial  
> firewall testing.
>
> I apologise for jumping to conclusions despite days of debugging...
>
> In the end I can recommend v1.0.11 for all purposes.
>
> Gunther
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: chilli-unsubscribe at coova.org
> For additional commands, e-mail: chilli-help at coova.org
> Wiki: http://coova.org/wiki/index.php/CoovaChilli
> Forum: http://coova.org/phpBB3/viewforum.php?f=4
>