Its a default for RadiusNT 2.5.120 and higher (because there are
so many borken implementations of RADIUS out ther). Set it to
0 to force a reject on them.
> What does this option do?
It allows packets with 0 length attributes to be accepted
(whereas the RFC says to silently ignore it or reject it).
> If packets are malformed, are they still processed?
Only if it is a zero length issue. Otherwise its definately
rejected.
> If not, why accept them...? ...or why would
> you enable this option?
Because you are using a NAS from a company that could
program a RADIUS client to the spec.
-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com