[isf-wifidog] Problème firewalling WRT54G

Lun 19 Sep 02:08:17 EDT 2005

are you talking about the fact that only http redirect is
effective and that i can use the the net on other ports even when
i'm not auth ?

i will tell you these infos, ok

kaouete

On Sun, Sep 18, 2005 at 09:59:52PM -0400, Philippe April wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> I tested RC3 tonight, and I don't have any issues anymore.
> 
> I'm curious about the issues you mentionned below and I would really  
> like to troubleshoot instead of modifying the priority of the init  
> script, as I'm not having the issue. I was having issues big time  
> with rc2 though.
> 
> Would you mind troubleshooting a bit more?
> 
> Like:
> 
> 1. re-installing wifidog and put it the way it was before (completely  
> flash if you can!)
> 2. posting your wifidog configuration
> 3. post output of (after wifidog has started):
>     iptables -t mangle -L
>     iptables -t filter -L
>     iptables -t nat -L
> 
> Otherwise there is very little I can do to fix it, as it's (now)  
> working at home.
> 
> Loïc (hope you read this), could you try RC3 and see if you still  
> have the issue?
> 
> Philippe April
> GnuPG http://key.philippeapril.com
> 
> On 17-Sep-05, at 1:38 PM, kaouete wrote:
> 
> >Ok,
> >
> >so, after a few tests there is the results :
> >
> >i installed a fresh openwrt whiterussian rc3
> >then i installed wifidog, modified the wifidog.conf, restarted the
> >wrt.
> >
> >1) without touching firewall script and cie :
> >S65wifidog is started after S45firewall :
> >if i try to connect to a website with a wifi client i get the
> >wifidog auth page
> >BUT i can anyway ssh to the net or any other port than 80.
> >
> >2) now i mv S65wifidog to S41wifidog (so it is started before
> >S45firewall), i comment the iptables flushing tables and cie and
> >add a sleep 10 at the beginning of the file to be sure that
> >wifidog have the time to load all of its rules.
> >
> >with a wifi client if i connect to the net : i get the wifidog
> >auth portal
> >AND i cant access to the net with anything without beeing authed
> >\o/
> >
> >concrusion : the openwrt out-of-box is not compatible with wifidog
> >for the moment. I think there should be a nicer way to fix it by
> >modifiing wifidog rules .. .. or note :]
> >
> >kaouete
> >
> >On Thu, Sep 15, 2005 at 02:33:17PM +0200, kaouete wrote:
> >
> >>ho, sorry :]
> >>
> >>Follow the link of the bug on sourceforge.
> >>
> >>For me the problem is that the openwrt firewall script breaks the
> >>iptables rules used by wifidog,
> >>
> >>but maybe it is working anyway, i will do more tests (and maybe other
> >>people too :) and will tell you if there are problems and if yes,
> >>what are they :]
> >>
> >>kaouete
> >>
> >>On Thu, Sep 15, 2005 at 02:17:54PM +0200, Max Horváth wrote:
> >>
> >>>Hey guys,
> >>>
> >>>I just those two words problem and firewall.
> >>>
> >>>As I can't read french, so I'd like to ask you, what kind of problem
> >>>exists and if you could translate it for me.
> >>>
> >>>Thanks and cheers, Max!
> >>>
> >>>Am 15.09.2005 um 13:16 schrieb kaouete:
> >>>
> >>>
> >>>>ok, alors je ferais des tests alors, je vous dirais ce que j'ai
> >>>>trouvé.
> >>>>
> >>>>kaouete
> >>>>
> >>>>On Thu, Sep 15, 2005 at 07:08:25AM -0400, Philippe April wrote:
> >>>>
> >>>>
> >>>>>-----BEGIN PGP SIGNED MESSAGE-----
> >>>>>Hash: SHA1
> >>>>>
> >>>>>En fait, je viens de relire le bug report et ma réponse à  
> >>>>>propos de
> >>>>>mauvais iptables ne s'applique peut-être pas à 100%, l'auteur  
> >>>>>semble
> >>>>>dire que c'est vraiment un problème d'ordre.
> >>>>>
> >>>>>Ceci étant dit, le plus de feedback de personnes externes on  
> >>>>>aura, le
> >>>>>mieux on saura si tout est beau maintenant :)
> >>>>>
> >>>>>Tiens-nous au courant!
> >>>>>
> >>>>>Philippe April
> >>>>>GnuPG http://key.philippeapril.com
> >>>>>
> >>>>>On 15-Sep-05, at 6:54 AM, kaouete wrote:
> >>>>>
> >>>>>
> >>>>>
> >>>>>>A ce propos, et en rapport avec ce bug :
> >>>>>>https://sourceforge.net/tracker/index.php?
> >>>>>>func=detail&aid=1210428&group_id=102646&atid=632424
> >>>>>>
> >>>>>>est-ce que ce probleme est reglé avec whiterussian ?
> >>>>>>
> >>>>>>(et il y a ausii d'autres bug sinon de reportés :)
> >>>>>>
> >>>>>>kaouete
> >>>>>>
> >>>>>>On Wed, Sep 14, 2005 at 10:54:46PM -0400, Philippe April wrote:
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>-----BEGIN PGP SIGNED MESSAGE-----
> >>>>>>>Hash: SHA1
> >>>>>>>
> >>>>>>>Disons que dernièrement je me suis mis plus à date, et ISF va
> >>>>>>>maintenant commencer à utiliser OpenWrt Whiterussian.
> >>>>>>>
> >>>>>>>Ce qui veut dire, que nous avons un package compilé pour
> >>>>>>>whiterussian
> >>>>>>>et qu'on va le tenir à jour!
> >>>>>>>
> >>>>>>>Donc, cette image (qui vient en fait du site d'openwrt):
> >>>>>>>http://www.ilesansfil.org/dist/wifidog/bin/openwrt/whiterussian-
> >>>>>>>rc2/
> >>>>>>>openwrt-wrt54g-squashfs.bin
> >>>>>>>
> >>>>>>>et ce package:
> >>>>>>>
> >>>>>>>http://www.ilesansfil.org/dist/wifidog/bin/openwrt/whiterussian-
> >>>>>>>rc2/
> >>>>>>>packages/wifidog_1.1.2-1_mipsel.ipk
> >>>>>>>
> >>>>>>>Les deux devraient fonctionner parfaitement! Et puis ça devrait
> >>>>>>>installer toutes les dépendences.
> >>>>>>>
> >>>>>>>Fait important: il faut utiliser /etc/init.d/S65wifidog (ou
> >>>>>>>wifidog-
> >>>>>>>init start) pour partir wifidog afin qu'il load les modules du
> >>>>>>>kernel
> >>>>>>>dont wifidog dépend.
> >>>>>>>
> >>>>>>>L'image openwrt, est pour un WRT54G et non pas un WRT54GS, pour
> >>>>>>>la S
> >>>>>>>on peut la trouver au même lien, ou sur le site d'openwrt.
> >>>>>>>
> >>>>>>>Tenez-nous au courant!
> >>>>>>>
> >>>>>>>Philippe April
> >>>>>>>GnuPG http://key.philippeapril.com
> >>>>>>>
> >>>>>>>On 14-Sep-05, at 9:58 PM, Loïc DEVAUX wrote:
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>><image001.gif>
> >>>>>>>>Salut,
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>Je viens de finir l???installation de l???auth server qui  
> >>>>>>>>s???est
> >>>>>>>>passée
> >>>>>>>>à merveille sur une debian sarge, merci pour votre magnifique
> >>>>>>>>travail.
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>Seulement j???ai des problèmes lors de l???installation de  
> >>>>>>>>wifidog
> >>>>>>>>client sur un WRT54G.
> >>>>>>>>
> >>>>>>>>Quelle version d???openwrt et quelle version de wifidog dois je
> >>>>>>>>utiliser pour ne pas avoir de problèmes ?
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>Merci d???avance pour votre réponse.
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>Loïc DEVAUX
> >>>>>>>>
> >>>>>>>>10 rue des mésanges
> >>>>>>>>
> >>>>>>>>63170 AUBIERE France
> >>>>>>>>
> >>>>>>>>(: (+33) 6 63 69 76 09
> >>>>>>>>
> >>>>>>>>*: loic.devaux99 at laposte.net
> >>>>>>>>
> >>>>>>>>Skype : mioz963
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>><image001.gif>
> >>>>>>>>_______________________________________________
> >>>>>>>>WiFiDog mailing list
> >>>>>>>>WiFiDog at listes.ilesansfil.org
> >>>>>>>>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>
> >>>>>>>-----BEGIN PGP SIGNATURE-----
> >>>>>>>Version: GnuPG v1.2.4 (Darwin)
> >>>>>>>
> >>>>>>>iD8DBQFDKOJ3Oq+Ep5Xn/aARAkXoAJ93s8aZTuhO2qnRkXDHKyfP4qSbeACfel23
> >>>>>>>JJvL2yATW5hSliOPoMXsT9M=
> >>>>>>>=TXoM
> >>>>>>>-----END PGP SIGNATURE-----
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>_______________________________________________
> >>>>>>>WiFiDog mailing list
> >>>>>>>WiFiDog at listes.ilesansfil.org
> >>>>>>>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>_______________________________________________
> >>>>>>WiFiDog mailing list
> >>>>>>WiFiDog at listes.ilesansfil.org
> >>>>>>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
> >>>>>>
> >>>>>>
> >>>>>
> >>>>>-----BEGIN PGP SIGNATURE-----
> >>>>>Version: GnuPG v1.2.4 (Darwin)
> >>>>>
> >>>>>iD8DBQFDKVYpOq+Ep5Xn/aARAgscAKDCcBMgHzY4ZM0PvQe0M5sRwNxM1wCaA9u6
> >>>>>vI5Dym6xZK8pjjtT0aojUFQ=
> >>>>>=7Fgh
> >>>>>-----END PGP SIGNATURE-----
> >>>>>_______________________________________________
> >>>>>WiFiDog mailing list
> >>>>>WiFiDog at listes.ilesansfil.org
> >>>>>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
> >>>>>
> >>>>>
> >>>>_______________________________________________
> >>>>WiFiDog mailing list
> >>>>WiFiDog at listes.ilesansfil.org
> >>>>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
> >>>>
> >>>
> >>>_______________________________________________
> >>>WiFiDog mailing list
> >>>WiFiDog at listes.ilesansfil.org
> >>>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
> >>>
> >
> >
> >
> >
> >>_______________________________________________
> >>WiFiDog mailing list
> >>WiFiDog at listes.ilesansfil.org
> >>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
> >>
> >_______________________________________________
> >WiFiDog mailing list
> >WiFiDog at listes.ilesansfil.org
> >http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (Darwin)
> 
> iD8DBQFDLhuZOq+Ep5Xn/aARAmWCAKCkDzrYtNbqFi9wlV8S84gWt3eD+QCfUqxL
> lIEfmXkmDjPq5eOCPEJlL0A=
> =4HY2
> -----END PGP SIGNATURE-----
> _______________________________________________
> WiFiDog mailing list
> WiFiDog at listes.ilesansfil.org
> http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
-------------- section suivante --------------
Une pièce jointe non texte a été nettoyée...
Nom: non disponible
Type: application/pgp-signature
Taille: 189 octets
Desc: Digital signature
Url: http://listes.ilesansfil.org/pipermail/wifidog/attachments/20050919/a471a891/attachment-0001.pgp