[isf-wifidog] gateway problem
Cara Ward
cara at onshore.com
Mer 10 Mai 02:30:19 EDT 2006
Hi,
I am testing wifidog for possible deployment in a large scale wireless
community network project in Chicago, but am unable to get the gateway
working properly. Hosts are directed to the portal and are able to
successfully authenticate via radius, but instead of gaining access online
the are redirected back to the login screen. The gateway is an
ibm server running debian 2.6.16.12 with netfilter and ipt_mac statically compiled into the kernel.
The output of lsmod is below.
Im still learning iptables, but I think, the wifidog
debug
log shows that everything should
be working, however when I issue iptables --list I do not see the
WiFiDog_Outgoing/Incoming chain at all.
Here is a portion of my log:
[6][Tue May 9 12:43:07 2006][2877](auth.c:209) Got ALLOWED from central
server authenticating token 0ad18c2ff45f31842e832013a141a7b0 from
192.168.5.113 at 20:20:20:20:20:20 - adding to firewall and redirecting
them to portal
[7][Tue May 9 12:43:07 2006][2877](firewall.c:87) Allowing 192.168.5.113
20:20:20:20:20:20 with fw_connection_state 2
[7][Tue May 9 12:43:07 2006][2877](fw_iptables.c:79) Executing command:
iptables -t mangle -A WiFiDog_Outgoing -s 192.168.5.113 -m mac
--mac-source 20:20:20:20:20:20 -j MARK --set-mark 2
[7][Tue May 9 12:43:07 2006][2877](util.c:108) Waiting for PID 2984 to
exit
[7][Tue May 9 12:43:07 2006][2877](gateway.c:256) Handler for SIGCHLD
called. Trying to reap a child
[7][Tue May 9 12:43:07 2006][2877](gateway.c:260) Handler for SIGCHLD
reaped child PID -1
[7][Tue May 9 12:43:07 2006][2877](util.c:110) Process PID 2984 exited
[7][Tue May 9 12:43:07 2006][2877](fw_iptables.c:79) Executing command:
iptables -t mangle -A WiFiDog_Incoming -d 192.168.5.113 -j ACCEPT
lsmod
Module Size Used by
ipt_REJECT 4992 0
ipt_TCPMSS 3840 0
ipt_REDIRECT 2432 0
xt_mark 2048 0
iptable_mangle 2816 0
ipt_MASQUERADE 3584 1
xt_state 2304 1
iptable_filter 2944 1
ip_nat_irc 2688 0
ip_nat_ftp 3200 0
iptable_nat 7172 1
ip_nat 16940 5
ipt_REDIRECT,ipt_MASQUERADE,ip_nat_irc,ip_nat_ftp,iptable_nat
ip_conntrack_irc 6384 1 ip_nat_irc
ip_conntrack_ftp 7280 1 ip_nat_ftp
ip_conntrack 47404 8
ipt_MASQUERADE,xt_state,ip_nat_irc,ip_nat_ftp,iptable_nat,ip_nat,ip_conntrack_irc,ip_conntrack_ftp
i2c_i801 7564 0
i2c_core 19856 1 i2c_i801
generic 4484 0 [permanent]
hw_random 5400 0
ata_piix 10116 0
libata 52240 1 ata_piix
tg3 91780 0
iptable_raw 2304 0
ip_tables 13144 4
iptable_mangle,iptable_filter,iptable_nat,iptable_raw
ip_gre 12320 0
ipt_ttl 1920 0
ipt_TOS 2304 0
ipt_tos 1792 0
xt_mac 2176 0
ipip 9956 0
ipt_addrtype 2048 0
psmouse 34056 0
ide_generic 1536 0 [permanent]
ide_disk 14976 0
ide_cd 36228 0
ide_core 107188 4 generic,ide_generic,ide_disk,ide_cd
genrtc 9600 0
....
I've set this up on two different machines with the same
problem so I'm guessing I'm missing something crucial on both.
Thanks in advance for any suggestions you can provide -
Cara Ward
More information about the WiFiDog
mailing list