On 11/5/07, <b class="gmail_sendername">Benoit Grégoire</b> <<a href="mailto:bock@step.polymtl.ca">bock@step.polymtl.ca</a>> wrote:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
It's not a "hole", in the sense that wifidog.conf (as distributed by the wifidog project) has sample configs to block access to upstream LAN if so desired. Aparently, the MSF firmware chose not to implement this block.
</blockquote><div><br>Um - what do you mean, by "sample configs" Benoit? Are there several different wifidog.conf files in the package?<br><br>I know the wifidog.conf file in the package we (MSF) install (<a class="urllink" href="http://downloads.openwrt.org/backports/rc5/wifidog_1.1.3_beta2-1_mipsel.ipk" rel="nofollow">
http://downloads.openwrt.org/backports/rc5/wifidog_1.1.3_beta2-1_mipsel.ipk</a> ) is well commented, is that what you mean by "sample configs"? Is there a more recent gateway package we should be installing?<br>
<br>I don't have access to any flashed router at the moment. I would like to prevent our hotspot users from accessing the upstream LAN, i.e. no access to other subnets. Could somebody please post the appropriate modifications to
wifidog.conf that would accomplish that?<br><br>Any help would be appreciated<br></div><br></div>-- <br>- Jeff