From: Alan T. DeKok <aland@freeradius.org>
Date: Wed, 10 Jan 2024 22:24:41 +0000 (-0500)
Subject: add more debugging
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=be3246f07d392cbe65c695d36a4ff062c832e0b3;p=thirdparty%2Ffreeradius-server.git

add more debugging
---

diff --git a/src/lib/io/master.c b/src/lib/io/master.c
index 45660c13f16..17b51426746 100644
--- a/src/lib/io/master.c
+++ b/src/lib/io/master.c
@@ -1532,12 +1532,20 @@ do_read:
 			 */
 			network = fr_trie_lookup_by_key(inst->networks, &address.socket.inet.src_ipaddr.addr,
 						 address.socket.inet.src_ipaddr.prefix);
-			if (!network) goto ignore;
+			if (!network) {
+				DEBUG3("Source IP %pV is outside of 'allowed' network range",
+				       fr_box_ipaddr(address.socket.inet.src_ipaddr));
+				goto ignore;
+			}
 
 			/*
 			 *	It exists, but it's a "deny" rule, ignore it.
 			 */
-			if (network->af == AF_UNSPEC) goto ignore;
+			if (network->af == AF_UNSPEC) {
+				DEBUG3("Source IP %pV is forbidden by the 'deny' network range",
+				       fr_box_ipaddr(address.socket.inet.src_ipaddr));
+				goto ignore;
+			}
 
 			/*
 			 *	Allocate our local radclient as a