<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2912" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Read <A
href="http://dev.wifidog.org/wiki/doc/install/openwrt">http://dev.wifidog.org/wiki/doc/install/openwrt</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>
<H3 id=Firewallrules>Firewall rules<A class=anchor title="Link to this section"
href="http://dev.wifidog.org/wiki/doc/install/openwrt#Firewallrules"> ¶</A></H3>
<P>If you set up your OpenWrt-powered router with a bridged network interface
(default), the current firewall rules of OpenWrt do not permit to block all
outgoing TCP/UDP ports except port 80 until a user has authenticated via
WiFiDog's login page. </P>
<P>You are going to have to disable forwarding from the bridge interface to the
wan interface: </P><PRE class=wiki># The following have been commented out for WiFiDog to work
# iptables -A FORWARD -i br0 -o br0 -j ACCEPT
# iptables -A FORWARD -i $LAN -o $WAN -j ACCEPT
</PRE></FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=tarkenwinn@gmail.com href="mailto:tarkenwinn@gmail.com">Tarken
Winn</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=wifidog@listes.ilesansfil.org
href="mailto:wifidog@listes.ilesansfil.org">WiFiDog Captive Portal</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Saturday, June 24, 2006 1:49
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [isf-wifidog] port 443 allowed
without authentication?</DIV>
<DIV><BR></DIV>Hi all,<BR><BR>I am running wifidog on a WRTGL. I have just
discovered that although HTTP (port 80) requests are redirected to the Wifidog
gateway, https (port 443) and other requests are not. This means that a user
can access any https URL without logging in. I presume this problem/issue has
already been resolved, but a Google search of the mailing list archives for
443 yielded no (English) results. I'd like to redirect all ports to the
wifidog gateway for login status validation.<BR><BR>Does anyone have any tips
or suggestions?<BR><BR>Cheers,<BR><BR>Tarken<BR>
<P>
<HR>
<P></P>_______________________________________________<BR>WiFiDog mailing
list<BR>WiFiDog@listes.ilesansfil.org<BR>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog</BLOCKQUOTE></BODY></HTML>