We use FreeRADIUS to authenticate customer PPP sessions. In some instances it is necessary to block customers, when they cease or fail to pay their bills. At the moment we set an incorrect password or lock the account, but this leads to the FreeRADIUS log filling up with failed auth requests.
I would like to implement something to block these users but without polluting the log with thousands of lines of failed requests. Interested to hear others' experience and suggestions of the best way to do so.
I have considered setting a null IP address that black holes the traffic, but interested to hear other ideas, such as a policy change to block certain users based on attributes in
radcheck DB table etc.