Re: nocat can't fetch MAC from 1 hop away?

"Sanket Desai" <[email protected]> Mon, 27 Mar 2006 10:20:45 +0530
Newsgroups gmane.network.nocat
Message-ID <[email protected]>
Hi Drew,

If I am not making mistake your problem is due to pgp. If you search
archives of this list, you will find description of such problems and
solutions for that as well. In short, I don't think that problem is "NoCat
seems to not be able to get the MAC address of the client from 1 hop away",
but problem is pgp encryption,due to which you get login page recursively.

regards,

Sanket.


On 3/27/06, Drew <[email protected]> wrote:
>
> internet---AW1---AW4
>
> NoCatAuth lives on AW1 (10.88.1.1), and when I connect a laptop
> wirelessly to AW1, everything works great. But when I connect the same
> laptop to AW4 (10.88.4.1), and try to go to google, I get the splash
> screen on AW1 come up, I hit login, but it loops back to the login
> screen again, and gets quite a few errors in the nocat.log, which you
> can see below, after the successful login to AW1. NoCat seems to not be
> able to get the MAC address of the client from 1 hop away, is that
> normal? Any suggestions on things I can try? I've been strugging with
> this problem for at least a year now.
>
> AW1:
> [2006-03-26 13:46:23] Spawning child process 3684.
> [2006-03-26 13:46:23] Connection to 10.88.1.1 from 10.88.1.54
> [2006-03-26 13:46:23] Peer  10.88.1.54  requests google.com
> [2006-03-26 13:46:23] Capturing peer 10.88.1.54
> [2006-03-26 13:46:23] Spawning child process 3685.
> [2006-03-26 13:46:23] Connection to 10.88.1.1 from 10.88.1.54
> [2006-03-26 13:46:23] Peer  10.88.1.54  requests 10.88.1.1
> [2006-03-26 13:46:23] Displaying splash page to peer 10.88.1.54
> [2006-03-26 13:46:23] Spawning child process 3686.
> [2006-03-26 13:46:23] Spawning child process 3687.
> [2006-03-26 13:46:24] Connection to 10.88.1.1 from 10.88.1.54
> [2006-03-26 13:46:24] Peer  10.88.1.54  requests 10.88.1.1
> [2006-03-26 13:46:24] Attempting to serve
> /usr/share/nocatauth/gateway/htdocs//images/login.gif
> [2006-03-26 13:46:24] Connection to 10.88.1.1 from 10.88.1.54
> [2006-03-26 13:46:24] Peer  10.88.1.54  requests 10.88.1.1
> [2006-03-26 13:46:24] Attempting to serve
> /usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif
>
> **pressed login button here.
>
> [2006-03-26 13:46:32] Spawning child process 3688.
> [2006-03-26 13:46:32] Connection to 10.88.1.1 from 10.88.1.54
> [2006-03-26 13:46:32] Peer  10.88.1.54  requests 10.88.1.1
> [2006-03-26 13:46:32] Opening portal for 10.88.1.54 to http://google.com/
> [2006-03-26 13:46:32] User () v. trusted (Any)
> [2006-03-26 13:46:32] User    permitted in class Public
> [2006-03-26 13:46:32] Notifying parent of Permit on peer 00:02:2D:28:BB:F4
> [2006-03-26 13:46:32] Got notification Permit of peer 00:02:2D:28:BB:F4
> [2006-03-26 13:46:32] Child process returned 1
>
> AW4:
> [2006-03-26 13:47:55] Spawning child process 3696.
> [2006-03-26 13:47:55] Connection to 10.88.1.1 from 10.88.4.171
> [2006-03-26 13:47:55] Peer  10.88.4.171  requests www.google.com
> [2006-03-26 13:47:55] Capturing peer 10.88.4.171
> [2006-03-26 13:47:55] Spawning child process 3697.
> [2006-03-26 13:47:55] Connection to 10.88.1.1 from 10.88.4.171
> [2006-03-26 13:47:55] Peer  10.88.4.171  requests 10.88.1.1
> [2006-03-26 13:47:55] Displaying splash page to peer 10.88.4.171
>
> **pressed login button here.
>
> [2006-03-26 13:48:34] Spawning child process 3700.
> [2006-03-26 13:48:34] Connection to 10.88.1.1 from 10.88.4.171
> [2006-03-26 13:48:34] Peer  10.88.4.171  requests 10.88.1.1
> [2006-03-26 13:48:34] Opening portal for 10.88.4.171 to
> http://www.google.com/
> [2006-03-26 13:48:34] Use of uninitialized value in hash element at
> /usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369.
> [2006-03-26 13:48:34] User () v. trusted (Any)
> iptables v1.2.11: Bad mac address `none'
> Try `iptables -h' or 'iptables --help' for more information.
> [2006-03-26 13:48:34] User    permitted in class Public
> [2006-03-26 13:48:34] Use of uninitialized value in chomp at
> /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226.
> [2006-03-26 13:48:34] Use of uninitialized value in join or string at
> /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229.
> [2006-03-26 13:48:34] Notifying parent of Permit on peer
> [2006-03-26 13:48:34] Use of uninitialized value in join or string at
> /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 151.
> [2006-03-26 13:48:34] Use of uninitialized value in chomp at
> /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226.
> [2006-03-26 13:48:34] Use of uninitialized value in join or string at
> /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229.
> [2006-03-26 13:48:34] Got notification Permit of peer
> [2006-03-26 13:48:34] Use of uninitialized value in hash element at
> /usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369.
> [2006-03-26 13:48:34] Child process returned 1
> [2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171
> [2006-03-26 13:48:35] Spawning child process 3704.
> [2006-03-26 13:48:35] Peer  10.88.4.171  requests www.google.com
> [2006-03-26 13:48:35] Capturing peer 10.88.4.171
> [2006-03-26 13:48:35] Spawning child process 3705.
> [2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171
> [2006-03-26 13:48:35] Peer  10.88.4.171  requests 10.88.1.1
> [2006-03-26 13:48:35] Displaying splash page to peer 10.88.4.171
> [2006-03-26 13:48:35] Spawning child process 3706.
> [2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171
> [2006-03-26 13:48:35] Spawning child process 3707.
> [2006-03-26 13:48:35] Connection to 10.88.1.1 from 10.88.4.171
> [2006-03-26 13:48:35] Peer  10.88.4.171  requests 10.88.1.1
> [2006-03-26 13:48:35] Attempting to serve
> /usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif
> [2006-03-26 13:48:35] Peer  10.88.4.171  requests 10.88.1.1
> [2006-03-26 13:48:35] Attempting to serve
> /usr/share/nocatauth/gateway/htdocs//images/login.gif
>
>
> AW1:/tmp# iptables -L -v
> Chain INPUT (policy ACCEPT 2725 packets, 210K bytes)
> pkts bytes target     prot opt in     out     source
> destination
>
> Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
> pkts bytes target     prot opt in     out     source
> destination
>   27  4256 NoCat      all  --  any    any     anywhere
> anywhere
>
> Chain OUTPUT (policy ACCEPT 3727 packets, 252K bytes)
> pkts bytes target     prot opt in     out     source
> destination
>
> Chain NoCat (1 references)
> pkts bytes target     prot opt in     out     source
> destination
>   27  4256 NoCat_Ports  all  --  any    any     anywhere
> anywhere
>   27  4256 NoCat_Inbound  all  --  any    any     anywhere
> anywhere
>    0     0 ACCEPT     all  --  br0    any     10.88.1.0/24
> anywhere            MARK match 0x1
>    0     0 ACCEPT     all  --  br0    any     10.88.1.0/24
> anywhere            MARK match 0x2
>    8  1510 ACCEPT     all  --  br0    any     10.88.1.0/24
> anywhere            MARK match 0x3
>    0     0 ACCEPT     tcp  --  any    any     10.88.1.0/24
> mouse.nocat.net     tcp dpt:www
>    0     0 ACCEPT     tcp  --  any    any     mouse.nocat.net
> 10.88.1.0/24        tcp spt:www
>    0     0 ACCEPT     tcp  --  any    any     10.88.1.0/24
> mouse.nocat.net     tcp dpt:https
>    0     0 ACCEPT     tcp  --  any    any     mouse.nocat.net
> 10.88.1.0/24        tcp spt:https
>    0     0 ACCEPT     all  --  any    br0     192.168.1.1
> 10.88.1.0/24
>    0     0 ACCEPT     tcp  --  br0    any     10.88.1.0/24
> 192.168.1.1         tcp dpt:domain
>    0     0 ACCEPT     udp  --  br0    any     10.88.1.0/24
> 192.168.1.1         udp dpt:domain
>    0     0 ACCEPT     all  --  br0    any     172.27.0.8/30
> anywhere            MARK match 0x1
>    0     0 ACCEPT     all  --  br0    any     172.27.0.8/30
> anywhere            MARK match 0x2
>    0     0 ACCEPT     all  --  br0    any     172.27.0.8/30
> anywhere            MARK match 0x3
>    0     0 ACCEPT     tcp  --  any    any     172.27.0.8/30
> mouse.nocat.net     tcp dpt:www
>    0     0 ACCEPT     tcp  --  any    any     mouse.nocat.net
> 172.27.0.8/30       tcp spt:www
>    0     0 ACCEPT     tcp  --  any    any     172.27.0.8/30
> mouse.nocat.net     tcp dpt:https
>    0     0 ACCEPT     tcp  --  any    any     mouse.nocat.net
> 172.27.0.8/30       tcp spt:https
>    0     0 ACCEPT     all  --  any    br0     192.168.1.1
> 172.27.0.8/30
>    0     0 ACCEPT     tcp  --  br0    any     172.27.0.8/30
> 192.168.1.1         tcp dpt:domain
>    0     0 ACCEPT     udp  --  br0    any     172.27.0.8/30
> 192.168.1.1         udp dpt:domain
>    0     0 DROP       tcp  --  eth0   any    !mouse.nocat.net
> anywhere            tcp dpt:5280
>    3   164 DROP       all  --  any    any     anywhere
> anywhere
>
> Chain NoCat_Inbound (1 references)
> pkts bytes target     prot opt in     out     source
> destination
>   16  2582 ACCEPT     all  --  any    any     anywhere
> 10.88.1.54
>    0     0 ACCEPT     all  --  any    any     anywhere
> 10.88.4.171
>
> Chain NoCat_Ports (1 references)
> pkts bytes target     prot opt in     out     source
> destination
>    0     0 DROP       tcp  --  br0    any     anywhere
> anywhere            tcp dpt:smtp MARK match 0x3
>    0     0 DROP       udp  --  br0    any     anywhere
> anywhere            udp dpt:25 MARK match 0x3
>
> AW1:/tmp# ifconfig
> br0       Link encap:Ethernet  HWaddr 00:02:6F:01:B9:71
>          inet addr:10.88.1.1  Bcast:10.88.1.255  Mask:255.255.255.0
>          inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:3383 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:10966 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:0
>          RX bytes:462959 (452.1 KiB)  TX bytes:3603175 (3.4 MiB)
>
> br0:0     Link encap:Ethernet  HWaddr 00:02:6F:01:B9:71
>          inet addr:172.27.0.10  Bcast:172.27.0.11  Mask:255.255.255.252
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>
> eth0      Link encap:Ethernet  HWaddr 00:0C:42:03:06:37
>          inet addr:192.168.1.3  Bcast:192.168.1.255  Mask:255.255.255.0
>          inet6 addr: fe80::20c:42ff:fe03:637/64 Scope:Link
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:3225 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:9912 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:1000
>          RX bytes:3099662 (2.9 MiB)  TX bytes:907645 (886.3 KiB)
>          Interrupt:9 Base address:0x6000
>
> eth1      Link encap:Ethernet  HWaddr 00:0C:42:03:06:38
>          inet addr:169.254.88.1  Bcast:169.254.255.255  Mask:255.255.0.0
>          inet6 addr: fe80::20c:42ff:fe03:638/64 Scope:Link
>          UP BROADCAST MULTICAST  MTU:1500  Metric:1
>          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:1000
>          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
>          Interrupt:10 Base address:0x8000
>
> lo        Link encap:Local Loopback
>          inet addr:127.0.0.1  Mask:255.0.0.0
>          inet6 addr: ::1/128 Scope:Host
>          UP LOOPBACK RUNNING  MTU:16436  Metric:1
>          RX packets:74 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:74 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:0
>          RX bytes:7353 (7.1 KiB)  TX bytes:7353 (7.1 KiB)
>
> wifi0     Link encap:UNSPEC  HWaddr
> 00-02-6F-08-0F-2C-00-00-00-00-00-00-00-00-00-00
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:423978 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:8088 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:1000
>          RX bytes:39413564 (37.5 MiB)  TX bytes:1198736 (1.1 MiB)
>          Interrupt:5 Base address:0x100
>
> wifi1     Link encap:UNSPEC  HWaddr
> 00-02-6F-01-B9-71-00-01-00-00-00-00-00-00-00-00
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:370366 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:10428 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:1000
>          RX bytes:34145423 (32.5 MiB)  TX bytes:3284732 (3.1 MiB)
>          Interrupt:11 Base address:0x180
>
> wlan0     Link encap:Ethernet  HWaddr 00:02:6F:08:0F:2C
>          inet6 addr: fe80::202:6fff:fe08:f2c/64 Scope:Link
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:674 errors:0 dropped:1200 overruns:0 frame:0
>          TX packets:8083 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:0
>          RX bytes:121905 (119.0 KiB)  TX bytes:1198580 (1.1 MiB)
>          Interrupt:5 Base address:0x100
>
> wlan1     Link encap:Ethernet  HWaddr 00:02:6F:01:B9:71
>          inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:2723 errors:0 dropped:3310 overruns:0 frame:0
>          TX packets:10423 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:0
>          RX bytes:389604 (380.4 KiB)  TX bytes:3284574 (3.1 MiB)
>          Interrupt:11 Base address:0x180
>
>
>
>
> _______________________________________________
> NoCat mailing list
> [email protected]
> http://lists.nocat.net/mailman/listinfo/nocat
>