[isf-wifidog] wifidog + friefunk

Frederico Marques frederico at marques.cx
Mer 17 Oct 11:26:38 EDT 2007


Larry,

On Oct 12, 2007, at 6:49 PM, Larry DiBona wrote:

> Fred
>
> Thanks for the info. I set up a TrustedMAClist before I posted my
> request, but it didn't help. I would like to try your iptables
> suggestion.  Could you tell me what the "WiFiDog_WIFI2Internet"  
> is . Is
> this a system variable set by Wifidog during installation? Should I  
> use
> this iptables command as is or substitute WiFiDog_WIFI2Internet with
> something?
>

It's an iptables table created by wifidog-gw where you deny *new*  
traffic coming from the gateway (client) interface. Basically, the  
default iptables rule on wifidog-gw is to deny every new packet  
coming from 10.0.0.0/8. So, new clients connected to OLSR (laptops  
for example) can't get through wifidog authentication. If you have  
something like this on your rules:

iptables -t filter -R WiFiDog_WIFI2Internet 3 -i eth1 -s 10.0.0.0/8 - 
m state --state NEW,INVALID -j DROP

where eth1 is your Gateway interface and 10.0.0.0/8 is your Mesh  
Network. Try to replace it with a

iptables -t filter -R WiFiDog_WIFI2Internet 3 -i eth1 -s !  
10.0.0.0/8  -m state --state NEW,INVALID -j DROP

It worked for me.

> More Info since I last posted: The node that is not connected to the
> Internet ,with no WAN connection and only on the mesh, will find the
> login page of the node that it meshes with that _is_ connected to the
> Internet WAN port.  This only works if I do not set the node to use
> itself as a gateway.  If you look at the mesh web report on the node,
> you can see the gateway that is being used, and the login page I  
> get is
> the login of the gateway.  Somehow OLSR is setting the default gateway
> and that gateway allows the node to see the Auth server, but the login
> page from the gateway displays, not the node. I can live with this,  
> but
> it would be way cooler for a node that is only connected using the  
> mesh
> to find the server directly and display it's own page.

That's a known multi-splash problem with wifidog and OLSR. Try my fix  
above. Don't know if it works for you.

Regards,

Fred


Plus d'informations sur la liste de diffusion WiFiDog