nocat can't fetch MAC from 1 hop away?
Drew <[email protected]> Sun, 26 Mar 2006 14:08:06 -0800
| Newsgroups | gmane.network.nocat |
|---|---|
| Message-ID | <[email protected]> |
internet---AW1---AW4
NoCatAuth lives on AW1 (10.88.1.1), and when I connect a laptop
wirelessly to AW1, everything works great. But when I connect the same
laptop to AW4 (10.88.4.1), and try to go to google, I get the splash
screen on AW1 come up, I hit login, but it loops back to the login
screen again, and gets quite a few errors in the nocat.log, which you
can see below, after the successful login to AW1. NoCat seems to not be
able to get the MAC address of the client from 1 hop away, is that
normal? Any suggestions on things I can try? I've been strugging with
this problem for at least a year now.
AW1:
[2006-03-26 13:46:23] Spawning child process 3684.
[2006-03-26 13:46:23] Connection to 10.88.1.1 from 10.88.1.54
[2006-03-26 13:46:23] Peer 10.88.1.54 requests google.com
[2006-03-26 13:46:23] Capturing peer 10.88.1.54
[2006-03-26 13:46:23] Spawning child process 3685.
[2006-03-26 13:46:23] Connection to 10.88.1.1 from 10.88.1.54
[2006-03-26 13:46:23] Peer 10.88.1.54 requests 10.88.1.1
[2006-03-26 13:46:23] Displaying splash page to peer 10.88.1.54
[2006-03-26 13:46:23] Spawning child process 3686.
[2006-03-26 13:46:23] Spawning child process 3687.
[2006-03-26 13:46:24] Connection to 10.88.1.1 from 10.88.1.54
[2006-03-26 13:46:24] Peer 10.88.1.54 requests 10.88.1.1
[2006-03-26 13:46:24] Attempting to serve
/usr/share/nocatauth/gateway/htdocs//images/login.gif
[2006-03-26 13:46:24] Connection to 10.88.1.1 from 10.88.1.54
[2006-03-26 13:46:24] Peer 10.88.1.54 requests 10.88.1.1
[2006-03-26 13:46:24] Attempting to serve
/usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif
**pressed login button here.
[2006-03-26 13:46:32] Spawning child process 3688.
[2006-03-26 13:46:32] Connection to 10.88.1.1 from 10.88.1.54
[2006-03-26 13:46:32] Peer 10.88.1.54 requests 10.88.1.1
[2006-03-26 13:46:32] Opening portal for 10.88.1.54 to http://google.com/
[2006-03-26 13:46:32] User () v. trusted (Any)
[2006-03-26 13:46:32] User permitted in class Public
[2006-03-26 13:46:32] Notifying parent of Permit on peer 00:02:2D:28:BB:F4
[2006-03-26 13:46:32] Got notification Permit of peer 00:02:2D:28:BB:F4
[2006-03-26 13:46:32] Child process returned 1
AW4:
[2006-03-26 13:47:55] Spawning child process 3696.
[2006-03-26 13:47:55] Connection to 10.88.1.1 from 10.88.4.171
[2006-03-26 13:47:55] Peer 10.88.4.171 requests www.google.com
[2006-03-26 13:47:55] Capturing peer 10.88.4.171
[2006-03-26 13:47:55] Spawning child process 3697.
[2006-03-26 13:47:55] Connection to 10.88.1.1 from 10.88.4.171
[2006-03-26 13:47:55] Peer 10.88.4.171 requests 10.88.1.1
[2006-03-26 13:47:55] Displaying splash page to peer 10.88.4.171
**pressed login button here.
[2006-03-26 13:48:34] Spawning child process 3700.
[2006-03-26 13:48:34] Connection to 10.88.1.1 from 10.88.4.171
[2006-03-26 13:48:34] Peer 10.88.4.171 requests 10.88.1.1
[2006-03-26 13:48:34] Opening portal for 10.88.4.171 to
http://www.google.com/
[2006-03-26 13:48:34] Use of uninitialized value in hash element at
/usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369.
[2006-03-26 13:48:34] User () v. trusted (Any)
iptables v1.2.11: Bad mac address `none'
Try `iptables -h' or 'iptables --help' for more information.
[2006-03-26 13:48:34] User permitted in class Public
[2006-03-26 13:48:34] Use of uninitialized value in chomp at
/usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226.
[2006-03-26 13:48:34] Use of uninitialized value in join or string at
/usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229.
[2006-03-26 13:48:34] Notifying parent of Permit on peer
[2006-03-26 13:48:34] Use of uninitialized value in join or string at
/usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 151.
[2006-03-26 13:48:34] Use of uninitialized value in chomp at
/usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226.
[2006-03-26 13:48:34] Use of uninitialized value in join or string at
/usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229.
[2006-03-26 13:48:34] Got notification Permit of peer
[2006-03-26 13:48:34] Use of uninitialized value in hash element at
/usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369.
[2006-03-26 13:48:34] Child process returned 1
[2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171
[2006-03-26 13:48:35] Spawning child process 3704.
[2006-03-26 13:48:35] Peer 10.88.4.171 requests www.google.com
[2006-03-26 13:48:35] Capturing peer 10.88.4.171
[2006-03-26 13:48:35] Spawning child process 3705.
[2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171
[2006-03-26 13:48:35] Peer 10.88.4.171 requests 10.88.1.1
[2006-03-26 13:48:35] Displaying splash page to peer 10.88.4.171
[2006-03-26 13:48:35] Spawning child process 3706.
[2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171
[2006-03-26 13:48:35] Spawning child process 3707.
[2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171
[2006-03-26 13:48:35] Peer 10.88.4.171 requests 10.88.1.1
[2006-03-26 13:48:35] Attempting to serve
/usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif
[2006-03-26 13:48:35] Peer 10.88.4.171 requests 10.88.1.1
[2006-03-26 13:48:35] Attempting to serve
/usr/share/nocatauth/gateway/htdocs//images/login.gif
AW1:/tmp# iptables -L -v
Chain INPUT (policy ACCEPT 2725 packets, 210K bytes)
pkts bytes target prot opt in out source
destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source
destination
27 4256 NoCat all -- any any anywhere
anywhere
Chain OUTPUT (policy ACCEPT 3727 packets, 252K bytes)
pkts bytes target prot opt in out source
destination
Chain NoCat (1 references)
pkts bytes target prot opt in out source
destination
27 4256 NoCat_Ports all -- any any anywhere
anywhere
27 4256 NoCat_Inbound all -- any any anywhere
anywhere
0 0 ACCEPT all -- br0 any 10.88.1.0/24
anywhere MARK match 0x1
0 0 ACCEPT all -- br0 any 10.88.1.0/24
anywhere MARK match 0x2
8 1510 ACCEPT all -- br0 any 10.88.1.0/24
anywhere MARK match 0x3
0 0 ACCEPT tcp -- any any 10.88.1.0/24
mouse.nocat.net tcp dpt:www
0 0 ACCEPT tcp -- any any mouse.nocat.net
10.88.1.0/24 tcp spt:www
0 0 ACCEPT tcp -- any any 10.88.1.0/24
mouse.nocat.net tcp dpt:https
0 0 ACCEPT tcp -- any any mouse.nocat.net
10.88.1.0/24 tcp spt:https
0 0 ACCEPT all -- any br0 192.168.1.1
10.88.1.0/24
0 0 ACCEPT tcp -- br0 any 10.88.1.0/24
192.168.1.1 tcp dpt:domain
0 0 ACCEPT udp -- br0 any 10.88.1.0/24
192.168.1.1 udp dpt:domain
0 0 ACCEPT all -- br0 any 172.27.0.8/30
anywhere MARK match 0x1
0 0 ACCEPT all -- br0 any 172.27.0.8/30
anywhere MARK match 0x2
0 0 ACCEPT all -- br0 any 172.27.0.8/30
anywhere MARK match 0x3
0 0 ACCEPT tcp -- any any 172.27.0.8/30
mouse.nocat.net tcp dpt:www
0 0 ACCEPT tcp -- any any mouse.nocat.net
172.27.0.8/30 tcp spt:www
0 0 ACCEPT tcp -- any any 172.27.0.8/30
mouse.nocat.net tcp dpt:https
0 0 ACCEPT tcp -- any any mouse.nocat.net
172.27.0.8/30 tcp spt:https
0 0 ACCEPT all -- any br0 192.168.1.1
172.27.0.8/30
0 0 ACCEPT tcp -- br0 any 172.27.0.8/30
192.168.1.1 tcp dpt:domain
0 0 ACCEPT udp -- br0 any 172.27.0.8/30
192.168.1.1 udp dpt:domain
0 0 DROP tcp -- eth0 any !mouse.nocat.net
anywhere tcp dpt:5280
3 164 DROP all -- any any anywhere
anywhere
Chain NoCat_Inbound (1 references)
pkts bytes target prot opt in out source
destination
16 2582 ACCEPT all -- any any anywhere
10.88.1.54
0 0 ACCEPT all -- any any anywhere
10.88.4.171
Chain NoCat_Ports (1 references)
pkts bytes target prot opt in out source
destination
0 0 DROP tcp -- br0 any anywhere
anywhere tcp dpt:smtp MARK match 0x3
0 0 DROP udp -- br0 any anywhere
anywhere udp dpt:25 MARK match 0x3
AW1:/tmp# ifconfig
br0 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71
inet addr:10.88.1.1 Bcast:10.88.1.255 Mask:255.255.255.0
inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3383 errors:0 dropped:0 overruns:0 frame:0
TX packets:10966 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:462959 (452.1 KiB) TX bytes:3603175 (3.4 MiB)
br0:0 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71
inet addr:172.27.0.10 Bcast:172.27.0.11 Mask:255.255.255.252
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
eth0 Link encap:Ethernet HWaddr 00:0C:42:03:06:37
inet addr:192.168.1.3 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::20c:42ff:fe03:637/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3225 errors:0 dropped:0 overruns:0 frame:0
TX packets:9912 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3099662 (2.9 MiB) TX bytes:907645 (886.3 KiB)
Interrupt:9 Base address:0x6000
eth1 Link encap:Ethernet HWaddr 00:0C:42:03:06:38
inet addr:169.254.88.1 Bcast:169.254.255.255 Mask:255.255.0.0
inet6 addr: fe80::20c:42ff:fe03:638/64 Scope:Link
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Interrupt:10 Base address:0x8000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:74 errors:0 dropped:0 overruns:0 frame:0
TX packets:74 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:7353 (7.1 KiB) TX bytes:7353 (7.1 KiB)
wifi0 Link encap:UNSPEC HWaddr
00-02-6F-08-0F-2C-00-00-00-00-00-00-00-00-00-00
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:423978 errors:0 dropped:0 overruns:0 frame:0
TX packets:8088 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:39413564 (37.5 MiB) TX bytes:1198736 (1.1 MiB)
Interrupt:5 Base address:0x100
wifi1 Link encap:UNSPEC HWaddr
00-02-6F-01-B9-71-00-01-00-00-00-00-00-00-00-00
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:370366 errors:0 dropped:0 overruns:0 frame:0
TX packets:10428 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:34145423 (32.5 MiB) TX bytes:3284732 (3.1 MiB)
Interrupt:11 Base address:0x180
wlan0 Link encap:Ethernet HWaddr 00:02:6F:08:0F:2C
inet6 addr: fe80::202:6fff:fe08:f2c/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:674 errors:0 dropped:1200 overruns:0 frame:0
TX packets:8083 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:121905 (119.0 KiB) TX bytes:1198580 (1.1 MiB)
Interrupt:5 Base address:0x100
wlan1 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71
inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2723 errors:0 dropped:3310 overruns:0 frame:0
TX packets:10423 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:389604 (380.4 KiB) TX bytes:3284574 (3.1 MiB)
Interrupt:11 Base address:0x180