<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">Are you running Whiterussian RC5 ?<DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR><DIV><DIV>On 17-Jun-06, at 9:01 PM, Tarken Winn wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite">Hi there,<BR> <BR> I have been experimenting with Wifidog (version 1.1.2-1) and have it successfully up and running on my shiny new Linksys WRT54GL.<BR> <BR> I am now wanting to allow access to a few specific websites without the user being prompted to login.<BR> <BR> I have tried adding them to /etc/wifidog.conf in both the FirewallRuleSet unknown-users{...} and FirewallRuleSet global {...} rule sets to no avail. Example below (I have also tried 'allow to <A href="http://0.0.0.0/0">0.0.0.0/0</A>' and other combos..)<BR> ...<BR> FirewallRuleSet unknown-users{ <BR> FirewallRule allow tcp port 80 to <A href="http://216.193.215.157">216.193.215.157</A> # The IP of the server I want to be able to access<BR> FirewallRule block to <A href="http://0.0.0.0/0">0.0.0.0/0</A><BR> }<BR> <BR> It appears that something (S45Firewall?) is superceding the FirewallRules specified in wifidog.conf. It is as if the redirect of any port 80 requests to the auth server is happening before the FirewallRules from Wifidog.conf are processed. I am redirected to the login page regardless of the IP address/site I attempt to access. If I login then access is granted as expected. [Disclaimer: I don't really know quite what I'm talking about but have spent a fair amount of time investigating this] <BR> <BR> The following is selected output from 'iptables -L -v' command:<BR> <BR> Chain WiFiDog_Unknown (1 references)<BR> pkts bytes target prot opt in out source destination<BR> 0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:80<BR> 11046 535K REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable<BR> <BR> Chain WiFiDog_WIFI2Internet (1 references)<BR> pkts bytes target prot opt in out source destination<BR> 12902 719K WiFiDog_AuthServers all -- any any anywhere anywhere<BR> 0 0 WiFiDog_Locked all -- any any anywhere anywhere MARK match 0x254<BR> 12864 717K WiFiDog_Global all -- any any anywhere anywhere<BR> 0 0 WiFiDog_Validate all -- any any anywhere anywhere MARK match 0x1<BR> 1818 182K WiFiDog_Known all -- any any anywhere anywhere MARK match 0x2<BR> 11046 535K WiFiDog_Unknown all -- any any anywhere anywhere<BR> <BR> I have had a good look through the mailing list archives and didn't find mention of this issue (although I can't read French) but expect I am not the first and only person to have it.<BR> <BR> Any suggestions would be much appreciated!<BR> <BR> Thanks in advance,<BR> <BR> Tarken<BR><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">_______________________________________________</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">WiFiDog mailing list</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:WiFiDog@listes.ilesansfil.org">WiFiDog@listes.ilesansfil.org</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog">http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog</A></DIV> </BLOCKQUOTE></DIV><BR></DIV></BODY></HTML>