On Tue, 08 Feb 2005 11:19:16 +1100
Carl Brewer <carl@bl.echidna.id.au> wrote:

> Martin Husemann wrote:
> > On Mon, Feb 07, 2005 at 04:55:29PM -0300, C=E9sar Catri=E1n C. wrote:
> >=20
> >>clear-auth-failure=3D5 seems a very low default to me.=20
> >=20
> >=20
> > This is from experiences with an ex-ISP of mine. They automatically dis=
abled
> > my access after 9 wrong retries. I had changed the password using their
> > web thing, modified /etc/ifconfig.pppoe0 - but forgot to reload the ppp=
oe
> > configuration - after 24 hours they also forced a disconnect, and on re=
connect
> > my machine got locked out. No need to mention this happend late friday=
=20
> > afternoon, and customer service was only available on the next monday.
> > If I had known the details, I would have had the connection back up on =
the
> > next morning - they cleared the "blocked" status in a nightly cron job.
> > But I didn't know at that time and customer servcie gave very wrong adv=
ice,
> > and then didn't response, etc. It took nearly a week and caused costs f=
or
> > a ISDN backup connection - and you probably understand why it's an ex-I=
SP
> > of mine. Anyway, I used the week w/o DSL connection to implement the ma=
x-auth-*
> > stuff.

Comprehensible. It is not a nice first experience for anyone.

> >>I've set it to '0' in my connection.
> > That's what I do on most machines too, after inintial testing.

Testing ... 5 more reconnections after some while?

> Martin's suggestion to use "destroy" not "delete" I haven't
> tried, and I'm not sure if it was a typo or not, but I'll
> try it next time it locks up.  What specifically has
> been changed in the pppoe stuff since 1.6.1?

I was unable to reconnect by clearing out failures last time.

Try the max-auth-failure parameter at ifconfig.pppoe0:
...
! /sbin/pppoectl $int myauthproto=3Dpap 'myauthname=3Duser@isp.com.au'=20
'myauthsecret=3DXXXXXX' hisauthproto=3Dnone max-auth-failure=3D0
...

As shown in pppoectl(8).

> I will look to upgrading to NBSD 2.0 in the next few months,
> but am a bit swamped with other stuff at the moment to do it
> in the next week :)

Good luck!

C=E9sar