From a3d1edc2b2c982b08a84cbe1631689afbf674585 Mon Sep 17 00:00:00 2001
From: Sam Leffler <sam@FreeBSD.org>
Date: Fri, 22 Jul 2005 05:17:52 +0000
Subject: [PATCH] send a response when an auth request is denied due to an acl;
 might be better to silently ignore the frame but this way we give stations a
 chance of figuring out what's wrong

---
 sys/net80211/ieee80211_input.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/sys/net80211/ieee80211_input.c b/sys/net80211/ieee80211_input.c
index abea74b51ea..082a834bae4 100644
--- a/sys/net80211/ieee80211_input.c
+++ b/sys/net80211/ieee80211_input.c
@@ -2114,6 +2114,11 @@ ieee80211_recv_mgmt(struct ieee80211com *ic, struct mbuf *m0,
 			IEEE80211_DISCARD(ic, IEEE80211_MSG_ACL,
 			    wh, "auth", "%s", "disallowed by ACL");
 			ic->ic_stats.is_rx_acl++;
+			if (ic->ic_opmode == IEEE80211_M_HOSTAP) {
+				IEEE80211_SEND_MGMT(ic, ni,
+				    IEEE80211_FC0_SUBTYPE_AUTH,
+				    (seq+1) | (IEEE80211_STATUS_UNSPECIFIED<<16));
+			}
 			return;
 		}
 		if (ic->ic_flags & IEEE80211_F_COUNTERM) {