| Newsgroups |
gmane.comp.security.firewalls.m0n0wall |
| Message-ID |
<[email protected]> |
Here are the rules for the interface HotSpot:
Proto Source Port Destination Port
PASS * * * HotSpot net *
PASS * * * WAN address *
and here are the firewall log, m0n0wall block the access to the wan interface, but why?
PASS 23:36:08.158730 HotSpot 192.168.72.198, port 38542 192.168.72.15, port 53 UDP
PASS 23:36:08.160400 HotSpot 192.168.72.198, port 47824 192.168.72.15, port 53 UDP
BLOCK 23:36:08.224151 HotSpot 192.168.72.198, port 49445 213.xx.xx.xx, port 80 TCP
BLOCK 23:36:11.217804 HotSpot 192.168.72.198, port 49445 213.xx.xx.xx, port 80 TCP
-----Original-Nachricht-----
Subject: [m0n0wall] Captive portal which firewall rule?
Date: Thu, 24 Feb 2011 16:10:01 +0100
From: "[email protected]" <[email protected]>
To: [email protected]
Hello,
using m0n0wall 1.33b2 with three network interfaces.
WAN (PPPoE)
LAN (static IP Adress)
Hotspot (Captive portal).
Problem is now, the captive portal only works if I create a firewall rule on the hotspot interface which allow traffic from and to *all* destinations.
Dont work if I create a rule with:
"source * destination hotspot subnet *"
AND
"source * destination wan subnet *"
Whats the right firewall rule to allow all traffic ONLY to the WAN interface from the hotspot/captive portal (after authentication)?
Samuel
----------------------------------------------------------------
Postfach fast voll? Jetzt kostenlos E-Mail Adresse @t-online.de sichern und endlich Platz für tausende Mails haben.
http://www.t-online.de/email-kostenlos
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
----------------------------------------------------------------
Postfach fast voll? Jetzt kostenlos E-Mail Adresse @t-online.de sichern und endlich Platz für tausende Mails haben.
http://www.t-online.de/email-kostenlos
----------------------------------------------------------------
Postfach fast voll? Jetzt kostenlos E-Mail Adresse @t-online.de sichern und endlich Platz für tausende Mails haben.
http://www.t-online.de/email-kostenlos