[isf-wifidog] No DNS resolution, nor access to AuthServer

Tuc at T-B-O-H.NET ml at t-b-o-h.net
Lun 12 Mai 00:06:45 EDT 2008


Hi,

	I'm having a problem with a new install. I've gotten
to the point I get a DHCP address while WD is running. However,
I can't get DNS from anywhere I try.

	If I instead do "lynx http://RANDOM.IP.ADDRESS.HERE"
I do get redirected to "http://AUTH.SERVER.NAME:80/wifidog/login/?...",
but then I never connect. (Ping/Pong is working fine). If I do
"lynx http://IP.OF.AUTH.SERVER:80/wifidog/login/?..." It won't connect
either.

	I dump the iptables, but it looks like nothing ever gets
matched. (See below)

	To be fair, this is running on a FreeBSD 5 system, with
a VMWare 3 emulator, with DamnSmallLinux, with eth0 to the
FreeBSD wired connectiom, eth1 to the FBSD wireless connection.
So it could be something with the environment.... 

	Looking for suggestions where to look.

		Thanks, Tuc
GatewayID GEVJON
ExternalInterface eth0
GatewayInterface eth1
GatewayAddress 192.168.100.1
AuthServer {
	Hostname MY.SERVER.
	Path /wifidog/
}
HTTPDName WiFiDog
ClientTimeout 5
FirewallRuleSet global {
}
FirewallRuleSet validating-users {
    FirewallRule allow to 0.0.0.0/0
}
FirewallRuleSet known-users {
    FirewallRule allow to 0.0.0.0/0
}
FirewallRuleSet unknown-users {
    FirewallRule allow udp port 53
    FirewallRule allow tcp port 53
    FirewallRule allow udp port 67
    FirewallRule allow tcp port 67
}
FirewallRuleSet locked-users {
    FirewallRule block to 0.0.0.0/0
}

Chain INPUT (policy ACCEPT 754 packets, 119K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 WiFiDog_WIFI2Internet  all  --  eth1   *       0.0.0.0/0            0.0.0.0/0          

Chain OUTPUT (policy ACCEPT 875 packets, 81758 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain WiFiDog_AuthServers (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            IP.OF.AUTH.SERVER

Chain WiFiDog_Global (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain WiFiDog_Known (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain WiFiDog_Locked (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          reject-with icmp-port-unreachable 

Chain WiFiDog_Unknown (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0          udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:53 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0          udp dpt:67 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:67 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          reject-with icmp-port-unreachable 

Chain WiFiDog_Validate (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain WiFiDog_WIFI2Internet (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          state INVALID 
    0     0 TCPMSS     tcp  --  *      eth0    0.0.0.0/0            0.0.0.0/0          tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
    0     0 WiFiDog_AuthServers  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
    0     0 WiFiDog_Locked  all  --  *      *       0.0.0.0/0            0.0.0.0/0          MARK match 0x254 
    0     0 WiFiDog_Global  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
    0     0 WiFiDog_Validate  all  --  *      *       0.0.0.0/0            0.0.0.0/0          MARK match 0x1 
    0     0 WiFiDog_Known  all  --  *      *       0.0.0.0/0            0.0.0.0/0          MARK match 0x2 
    0     0 WiFiDog_Unknown  all  --  *      *       0.0.0.0/0            0.0.0.0/0          


Plus d'informations sur la liste de diffusion WiFiDog