Re: nocat can't fetch MAC from 1 hop away?
"Sanket Desai" <[email protected]> Mon, 27 Mar 2006 10:20:45 +0530
| Newsgroups | gmane.network.nocat |
|---|---|
| Message-ID | <[email protected]> |
Hi Drew, If I am not making mistake your problem is due to pgp. If you search archives of this list, you will find description of such problems and solutions for that as well. In short, I don't think that problem is "NoCat seems to not be able to get the MAC address of the client from 1 hop away", but problem is pgp encryption,due to which you get login page recursively. regards, Sanket. On 3/27/06, Drew <[email protected]> wrote: > > internet---AW1---AW4 > > NoCatAuth lives on AW1 (10.88.1.1), and when I connect a laptop > wirelessly to AW1, everything works great. But when I connect the same > laptop to AW4 (10.88.4.1), and try to go to google, I get the splash > screen on AW1 come up, I hit login, but it loops back to the login > screen again, and gets quite a few errors in the nocat.log, which you > can see below, after the successful login to AW1. NoCat seems to not be > able to get the MAC address of the client from 1 hop away, is that > normal? Any suggestions on things I can try? I've been strugging with > this problem for at least a year now. > > AW1: > [2006-03-26 13:46:23] Spawning child process 3684. > [2006-03-26 13:46:23] Connection to 10.88.1.1 from 10.88.1.54 > [2006-03-26 13:46:23] Peer 10.88.1.54 requests google.com > [2006-03-26 13:46:23] Capturing peer 10.88.1.54 > [2006-03-26 13:46:23] Spawning child process 3685. > [2006-03-26 13:46:23] Connection to 10.88.1.1 from 10.88.1.54 > [2006-03-26 13:46:23] Peer 10.88.1.54 requests 10.88.1.1 > [2006-03-26 13:46:23] Displaying splash page to peer 10.88.1.54 > [2006-03-26 13:46:23] Spawning child process 3686. > [2006-03-26 13:46:23] Spawning child process 3687. > [2006-03-26 13:46:24] Connection to 10.88.1.1 from 10.88.1.54 > [2006-03-26 13:46:24] Peer 10.88.1.54 requests 10.88.1.1 > [2006-03-26 13:46:24] Attempting to serve > /usr/share/nocatauth/gateway/htdocs//images/login.gif > [2006-03-26 13:46:24] Connection to 10.88.1.1 from 10.88.1.54 > [2006-03-26 13:46:24] Peer 10.88.1.54 requests 10.88.1.1 > [2006-03-26 13:46:24] Attempting to serve > /usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif > > **pressed login button here. > > [2006-03-26 13:46:32] Spawning child process 3688. > [2006-03-26 13:46:32] Connection to 10.88.1.1 from 10.88.1.54 > [2006-03-26 13:46:32] Peer 10.88.1.54 requests 10.88.1.1 > [2006-03-26 13:46:32] Opening portal for 10.88.1.54 to http://google.com/ > [2006-03-26 13:46:32] User () v. trusted (Any) > [2006-03-26 13:46:32] User permitted in class Public > [2006-03-26 13:46:32] Notifying parent of Permit on peer 00:02:2D:28:BB:F4 > [2006-03-26 13:46:32] Got notification Permit of peer 00:02:2D:28:BB:F4 > [2006-03-26 13:46:32] Child process returned 1 > > AW4: > [2006-03-26 13:47:55] Spawning child process 3696. > [2006-03-26 13:47:55] Connection to 10.88.1.1 from 10.88.4.171 > [2006-03-26 13:47:55] Peer 10.88.4.171 requests www.google.com > [2006-03-26 13:47:55] Capturing peer 10.88.4.171 > [2006-03-26 13:47:55] Spawning child process 3697. > [2006-03-26 13:47:55] Connection to 10.88.1.1 from 10.88.4.171 > [2006-03-26 13:47:55] Peer 10.88.4.171 requests 10.88.1.1 > [2006-03-26 13:47:55] Displaying splash page to peer 10.88.4.171 > > **pressed login button here. > > [2006-03-26 13:48:34] Spawning child process 3700. > [2006-03-26 13:48:34] Connection to 10.88.1.1 from 10.88.4.171 > [2006-03-26 13:48:34] Peer 10.88.4.171 requests 10.88.1.1 > [2006-03-26 13:48:34] Opening portal for 10.88.4.171 to > http://www.google.com/ > [2006-03-26 13:48:34] Use of uninitialized value in hash element at > /usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369. > [2006-03-26 13:48:34] User () v. trusted (Any) > iptables v1.2.11: Bad mac address `none' > Try `iptables -h' or 'iptables --help' for more information. > [2006-03-26 13:48:34] User permitted in class Public > [2006-03-26 13:48:34] Use of uninitialized value in chomp at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226. > [2006-03-26 13:48:34] Use of uninitialized value in join or string at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229. > [2006-03-26 13:48:34] Notifying parent of Permit on peer > [2006-03-26 13:48:34] Use of uninitialized value in join or string at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 151. > [2006-03-26 13:48:34] Use of uninitialized value in chomp at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226. > [2006-03-26 13:48:34] Use of uninitialized value in join or string at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229. > [2006-03-26 13:48:34] Got notification Permit of peer > [2006-03-26 13:48:34] Use of uninitialized value in hash element at > /usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369. > [2006-03-26 13:48:34] Child process returned 1 > [2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171 > [2006-03-26 13:48:35] Spawning child process 3704. > [2006-03-26 13:48:35] Peer 10.88.4.171 requests www.google.com > [2006-03-26 13:48:35] Capturing peer 10.88.4.171 > [2006-03-26 13:48:35] Spawning child process 3705. > [2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171 > [2006-03-26 13:48:35] Peer 10.88.4.171 requests 10.88.1.1 > [2006-03-26 13:48:35] Displaying splash page to peer 10.88.4.171 > [2006-03-26 13:48:35] Spawning child process 3706. > [2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171 > [2006-03-26 13:48:35] Spawning child process 3707. > [2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171 > [2006-03-26 13:48:35] Peer 10.88.4.171 requests 10.88.1.1 > [2006-03-26 13:48:35] Attempting to serve > /usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif > [2006-03-26 13:48:35] Peer 10.88.4.171 requests 10.88.1.1 > [2006-03-26 13:48:35] Attempting to serve > /usr/share/nocatauth/gateway/htdocs//images/login.gif > > > AW1:/tmp# iptables -L -v > Chain INPUT (policy ACCEPT 2725 packets, 210K bytes) > pkts bytes target prot opt in out source > destination > > Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) > pkts bytes target prot opt in out source > destination > 27 4256 NoCat all -- any any anywhere > anywhere > > Chain OUTPUT (policy ACCEPT 3727 packets, 252K bytes) > pkts bytes target prot opt in out source > destination > > Chain NoCat (1 references) > pkts bytes target prot opt in out source > destination > 27 4256 NoCat_Ports all -- any any anywhere > anywhere > 27 4256 NoCat_Inbound all -- any any anywhere > anywhere > 0 0 ACCEPT all -- br0 any 10.88.1.0/24 > anywhere MARK match 0x1 > 0 0 ACCEPT all -- br0 any 10.88.1.0/24 > anywhere MARK match 0x2 > 8 1510 ACCEPT all -- br0 any 10.88.1.0/24 > anywhere MARK match 0x3 > 0 0 ACCEPT tcp -- any any 10.88.1.0/24 > mouse.nocat.net tcp dpt:www > 0 0 ACCEPT tcp -- any any mouse.nocat.net > 10.88.1.0/24 tcp spt:www > 0 0 ACCEPT tcp -- any any 10.88.1.0/24 > mouse.nocat.net tcp dpt:https > 0 0 ACCEPT tcp -- any any mouse.nocat.net > 10.88.1.0/24 tcp spt:https > 0 0 ACCEPT all -- any br0 192.168.1.1 > 10.88.1.0/24 > 0 0 ACCEPT tcp -- br0 any 10.88.1.0/24 > 192.168.1.1 tcp dpt:domain > 0 0 ACCEPT udp -- br0 any 10.88.1.0/24 > 192.168.1.1 udp dpt:domain > 0 0 ACCEPT all -- br0 any 172.27.0.8/30 > anywhere MARK match 0x1 > 0 0 ACCEPT all -- br0 any 172.27.0.8/30 > anywhere MARK match 0x2 > 0 0 ACCEPT all -- br0 any 172.27.0.8/30 > anywhere MARK match 0x3 > 0 0 ACCEPT tcp -- any any 172.27.0.8/30 > mouse.nocat.net tcp dpt:www > 0 0 ACCEPT tcp -- any any mouse.nocat.net > 172.27.0.8/30 tcp spt:www > 0 0 ACCEPT tcp -- any any 172.27.0.8/30 > mouse.nocat.net tcp dpt:https > 0 0 ACCEPT tcp -- any any mouse.nocat.net > 172.27.0.8/30 tcp spt:https > 0 0 ACCEPT all -- any br0 192.168.1.1 > 172.27.0.8/30 > 0 0 ACCEPT tcp -- br0 any 172.27.0.8/30 > 192.168.1.1 tcp dpt:domain > 0 0 ACCEPT udp -- br0 any 172.27.0.8/30 > 192.168.1.1 udp dpt:domain > 0 0 DROP tcp -- eth0 any !mouse.nocat.net > anywhere tcp dpt:5280 > 3 164 DROP all -- any any anywhere > anywhere > > Chain NoCat_Inbound (1 references) > pkts bytes target prot opt in out source > destination > 16 2582 ACCEPT all -- any any anywhere > 10.88.1.54 > 0 0 ACCEPT all -- any any anywhere > 10.88.4.171 > > Chain NoCat_Ports (1 references) > pkts bytes target prot opt in out source > destination > 0 0 DROP tcp -- br0 any anywhere > anywhere tcp dpt:smtp MARK match 0x3 > 0 0 DROP udp -- br0 any anywhere > anywhere udp dpt:25 MARK match 0x3 > > AW1:/tmp# ifconfig > br0 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71 > inet addr:10.88.1.1 Bcast:10.88.1.255 Mask:255.255.255.0 > inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:3383 errors:0 dropped:0 overruns:0 frame:0 > TX packets:10966 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:462959 (452.1 KiB) TX bytes:3603175 (3.4 MiB) > > br0:0 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71 > inet addr:172.27.0.10 Bcast:172.27.0.11 Mask:255.255.255.252 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > eth0 Link encap:Ethernet HWaddr 00:0C:42:03:06:37 > inet addr:192.168.1.3 Bcast:192.168.1.255 Mask:255.255.255.0 > inet6 addr: fe80::20c:42ff:fe03:637/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:3225 errors:0 dropped:0 overruns:0 frame:0 > TX packets:9912 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:3099662 (2.9 MiB) TX bytes:907645 (886.3 KiB) > Interrupt:9 Base address:0x6000 > > eth1 Link encap:Ethernet HWaddr 00:0C:42:03:06:38 > inet addr:169.254.88.1 Bcast:169.254.255.255 Mask:255.255.0.0 > inet6 addr: fe80::20c:42ff:fe03:638/64 Scope:Link > UP BROADCAST MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) > Interrupt:10 Base address:0x8000 > > lo Link encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:74 errors:0 dropped:0 overruns:0 frame:0 > TX packets:74 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:7353 (7.1 KiB) TX bytes:7353 (7.1 KiB) > > wifi0 Link encap:UNSPEC HWaddr > 00-02-6F-08-0F-2C-00-00-00-00-00-00-00-00-00-00 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:423978 errors:0 dropped:0 overruns:0 frame:0 > TX packets:8088 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:39413564 (37.5 MiB) TX bytes:1198736 (1.1 MiB) > Interrupt:5 Base address:0x100 > > wifi1 Link encap:UNSPEC HWaddr > 00-02-6F-01-B9-71-00-01-00-00-00-00-00-00-00-00 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:370366 errors:0 dropped:0 overruns:0 frame:0 > TX packets:10428 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:34145423 (32.5 MiB) TX bytes:3284732 (3.1 MiB) > Interrupt:11 Base address:0x180 > > wlan0 Link encap:Ethernet HWaddr 00:02:6F:08:0F:2C > inet6 addr: fe80::202:6fff:fe08:f2c/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:674 errors:0 dropped:1200 overruns:0 frame:0 > TX packets:8083 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:121905 (119.0 KiB) TX bytes:1198580 (1.1 MiB) > Interrupt:5 Base address:0x100 > > wlan1 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71 > inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:2723 errors:0 dropped:3310 overruns:0 frame:0 > TX packets:10423 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:389604 (380.4 KiB) TX bytes:3284574 (3.1 MiB) > Interrupt:11 Base address:0x180 > > > > > _______________________________________________ > NoCat mailing list > [email protected] > http://lists.nocat.net/mailman/listinfo/nocat >