Re: nocat can't fetch MAC from 1 hop away?

Drew <[email protected]> Mon, 27 Mar 2006 09:17:52 -0800
Newsgroups gmane.network.nocat
Message-ID <[email protected]>
I'm running in open mode, would pgp come into play here? Also, I get no 
loop when the client connects directly to the machine running nocat, and 
everything works fine there, but I do get the loop when the client 
connects to a machine 1 hop away (AW4) from the machine running nocat, 
which is routing to the machine with nocat (AW1).

Sanket Desai wrote:

> Hi Drew,
>  
> If I am not making mistake your problem is due to pgp. If you search 
> archives of this list, you will find description of such problems and 
> solutions for that as well. In short, I don't think that problem is 
> "NoCat seems to not be able to get the MAC address of the client from 
> 1 hop away", but problem is pgp encryption,due to which you get login 
> page recursively.
>  
> regards,
>  
> Sanket.
>
>  
> On 3/27/06, *Drew* <[email protected] 
> <mailto:[email protected]>> wrote:
>
>     internet---AW1---AW4
>
>     NoCatAuth lives on AW1 (10.88.1.1 <http://10.88.1.1>), and when I
>     connect a laptop
>     wirelessly to AW1, everything works great. But when I connect the same
>     laptop to AW4 (10.88.4.1 <http://10.88.4.1>), and try to go to
>     google, I get the splash
>     screen on AW1 come up, I hit login, but it loops back to the login
>     screen again, and gets quite a few errors in the nocat.log, which you
>     can see below, after the successful login to AW1. NoCat seems to
>     not be
>     able to get the MAC address of the client from 1 hop away, is that
>     normal? Any suggestions on things I can try? I've been strugging with
>     this problem for at least a year now.
>
>     AW1:
>     [2006-03-26 13:46:23] Spawning child process 3684.
>     [2006-03-26 13:46:23] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.1.54 <http://10.88.1.54>
>     [2006-03-26 13:46:23] Peer  10.88.1.54
>     <http://10.88.1.54>  requests google.com <http://google.com>
>     [2006-03-26 13:46:23] Capturing peer 10.88.1.54 <http://10.88.1.54>
>     [2006-03-26 13:46:23] Spawning child process 3685.
>     [2006-03-26 13:46:23] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.1.54 <http://10.88.1.54>
>     [2006-03-26 13:46:23] Peer  10.88.1.54
>     <http://10.88.1.54>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:46:23] Displaying splash page to peer 10.88.1.54
>     <http://10.88.1.54>
>     [2006-03-26 13:46:23] Spawning child process 3686.
>     [2006-03-26 13:46:23] Spawning child process 3687.
>     [2006-03-26 13:46:24] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.1.54 <http://10.88.1.54>
>     [2006-03-26 13:46:24] Peer  10.88.1.54
>     <http://10.88.1.54>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:46:24] Attempting to serve
>     /usr/share/nocatauth/gateway/htdocs//images/login.gif
>     [2006-03-26 13:46:24] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.1.54 <http://10.88.1.54>
>     [2006-03-26 13:46:24] Peer  10.88.1.54
>     <http://10.88.1.54>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:46:24] Attempting to serve
>     /usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif
>
>     **pressed login button here.
>
>     [2006-03-26 13:46:32] Spawning child process 3688.
>     [2006-03-26 13:46:32] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.1.54 <http://10.88.1.54>
>     [2006-03-26 13:46:32] Peer  10.88.1.54
>     <http://10.88.1.54>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:46:32] Opening portal for 10.88.1.54
>     <http://10.88.1.54> to http://google.com/
>     [2006-03-26 13:46:32] User () v. trusted (Any)
>     [2006-03-26 13:46:32] User    permitted in class Public
>     [2006-03-26 13:46:32] Notifying parent of Permit on peer
>     00:02:2D:28:BB:F4
>     [2006-03-26 13:46:32] Got notification Permit of peer
>     00:02:2D:28:BB:F4
>     [2006-03-26 13:46:32] Child process returned 1
>
>     AW4:
>     [2006-03-26 13:47:55] Spawning child process 3696.
>     [2006-03-26 13:47:55] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:47:55] Peer  10.88.4.171
>     <http://10.88.4.171>  requests www.google.com <http://www.google.com>
>     [2006-03-26 13:47:55] Capturing peer 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:47:55] Spawning child process 3697.
>     [2006-03-26 13:47:55] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:47:55] Peer  10.88.4.171
>     <http://10.88.4.171>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:47:55] Displaying splash page to peer 10.88.4.171
>     <http://10.88.4.171>
>
>     **pressed login button here.
>
>     [2006-03-26 13:48:34] Spawning child process 3700.
>     [2006-03-26 13:48:34] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:48:34] Peer  10.88.4.171
>     <http://10.88.4.171>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:48:34] Opening portal for 10.88.4.171
>     <http://10.88.4.171> to
>     http://www.google.com/
>     [2006-03-26 13:48:34] Use of uninitialized value in hash element at
>     /usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369.
>     [2006-03-26 13:48:34] User () v. trusted (Any)
>     iptables v1.2.11: Bad mac address `none'
>     Try `iptables -h' or 'iptables --help' for more information.
>     [2006-03-26 13:48:34] User    permitted in class Public
>     [2006-03-26 13:48:34] Use of uninitialized value in chomp at
>     /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226.
>     [2006-03-26 13:48:34] Use of uninitialized value in join or string at
>     /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229.
>     [2006-03-26 13:48:34] Notifying parent of Permit on peer
>     [2006-03-26 13:48:34] Use of uninitialized value in join or string at
>     /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 151.
>     [2006-03-26 13:48:34] Use of uninitialized value in chomp at
>     /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226.
>     [2006-03-26 13:48:34] Use of uninitialized value in join or string at
>     /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229.
>     [2006-03-26 13:48:34] Got notification Permit of peer
>     [2006-03-26 13:48:34] Use of uninitialized value in hash element at
>     /usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369.
>     [2006-03-26 13:48:34] Child process returned 1
>     [2006-03-26 13:48:35] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:48:35] Spawning child process 3704.
>     [2006-03-26 13:48:35] Peer  10.88.4.171
>     <http://10.88.4.171>  requests www.google.com <http://www.google.com>
>     [2006-03-26 13:48:35] Capturing peer 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:48:35] Spawning child process 3705.
>     [2006-03-26 13:48:35] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:48:35] Peer  10.88.4.171
>     <http://10.88.4.171>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:48:35] Displaying splash page to peer 10.88.4.171
>     <http://10.88.4.171>
>     [2006-03-26 13:48:35] Spawning child process 3706.
>     [2006-03-26 13:48:35] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:48:35] Spawning child process 3707.
>     [2006-03-26 13:48:35] Connection to 10.88.1.1 <http://10.88.1.1>
>     from 10.88.4.171 <http://10.88.4.171>
>     [2006-03-26 13:48:35] Peer  10.88.4.171
>     <http://10.88.4.171>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:48:35] Attempting to serve
>     /usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif
>     [2006-03-26 13:48:35] Peer  10.88.4.171
>     <http://10.88.4.171>  requests 10.88.1.1 <http://10.88.1.1>
>     [2006-03-26 13:48:35] Attempting to serve
>     /usr/share/nocatauth/gateway/htdocs//images/login.gif
>
>
>     AW1:/tmp# iptables -L -v
>     Chain INPUT (policy ACCEPT 2725 packets, 210K bytes)
>     pkts bytes target     prot opt in     out     source
>     destination
>
>     Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
>     pkts bytes target     prot opt in     out     source
>     destination
>       27  4256 NoCat      all  --  any    any     anywhere
>     anywhere
>
>     Chain OUTPUT (policy ACCEPT 3727 packets, 252K bytes)
>     pkts bytes target     prot opt in     out     source
>     destination
>
>     Chain NoCat (1 references)
>     pkts bytes target     prot opt in     out     source
>     destination
>       27  4256 NoCat_Ports  all  --  any    any     anywhere
>     anywhere
>       27  4256 NoCat_Inbound  all  --  any    any     anywhere
>     anywhere
>        0     0 ACCEPT     all  --  br0    any     10.88.1.0/24
>     <http://10.88.1.0/24>
>     anywhere            MARK match 0x1
>        0     0 ACCEPT     all  --  br0    any     10.88.1.0/24
>     <http://10.88.1.0/24>
>     anywhere            MARK match 0x2
>        8  1510 ACCEPT     all  --  br0    any     10.88.1.0/24
>     <http://10.88.1.0/24>
>     anywhere            MARK match 0x3
>        0     0 ACCEPT     tcp  --  any    any     10.88.1.0/24
>     <http://10.88.1.0/24>
>     mouse.nocat.net <http://mouse.nocat.net>     tcp dpt:www
>        0     0 ACCEPT     tcp  --  any    any     mouse.nocat.net
>     <http://mouse.nocat.net>
>     10.88.1.0/24 <http://10.88.1.0/24>        tcp spt:www
>        0     0 ACCEPT     tcp  --  any    any     10.88.1.0/24
>     <http://10.88.1.0/24>
>     mouse.nocat.net <http://mouse.nocat.net>     tcp dpt:https
>        0     0 ACCEPT     tcp  --  any    any     mouse.nocat.net
>     <http://mouse.nocat.net>
>     10.88.1.0/24 <http://10.88.1.0/24>        tcp spt:https
>        0     0 ACCEPT     all  --  any    br0     192.168.1.1
>     <http://192.168.1.1>
>     10.88.1.0/24 <http://10.88.1.0/24>
>        0     0 ACCEPT     tcp  --  br0    any     10.88.1.0/24
>     <http://10.88.1.0/24>
>     192.168.1.1 <http://192.168.1.1>         tcp dpt:domain
>        0     0 ACCEPT     udp  --  br0    any     10.88.1.0/24
>     <http://10.88.1.0/24>
>     192.168.1.1 <http://192.168.1.1>         udp dpt:domain
>        0     0 ACCEPT     all  --  br0    any     172.27.0.8/30
>     <http://172.27.0.8/30>
>     anywhere            MARK match 0x1
>        0     0 ACCEPT     all  --  br0    any     172.27.0.8/30
>     <http://172.27.0.8/30>
>     anywhere            MARK match 0x2
>        0     0 ACCEPT     all  --  br0    any     172.27.0.8/30
>     <http://172.27.0.8/30>
>     anywhere            MARK match 0x3
>        0     0 ACCEPT     tcp  --  any    any     172.27.0.8/30
>     <http://172.27.0.8/30>
>     mouse.nocat.net <http://mouse.nocat.net>     tcp dpt:www
>        0     0 ACCEPT     tcp  --  any    any     mouse.nocat.net
>     <http://mouse.nocat.net>
>     172.27.0.8/30 <http://172.27.0.8/30>       tcp spt:www
>        0     0 ACCEPT     tcp  --  any    any     172.27.0.8/30
>     <http://172.27.0.8/30>
>     mouse.nocat.net <http://mouse.nocat.net>     tcp dpt:https
>        0     0 ACCEPT     tcp  --  any    any     mouse.nocat.net
>     <http://mouse.nocat.net>
>     172.27.0.8/30 <http://172.27.0.8/30>       tcp spt:https
>        0     0 ACCEPT     all  --  any    br0     192.168.1.1
>     <http://192.168.1.1>
>     172.27.0.8/30 <http://172.27.0.8/30>
>        0     0 ACCEPT     tcp  --  br0    any     172.27.0.8/30
>     <http://172.27.0.8/30>
>     192.168.1.1 <http://192.168.1.1>         tcp dpt:domain
>        0     0 ACCEPT     udp  --  br0    any     172.27.0.8/30
>     <http://172.27.0.8/30>
>     192.168.1.1 <http://192.168.1.1>         udp dpt:domain
>        0     0 DROP       tcp  --  eth0   any    !mouse.nocat.net
>     anywhere            tcp dpt:5280
>        3   164 DROP       all  --  any    any     anywhere
>     anywhere
>
>     Chain NoCat_Inbound (1 references)
>     pkts bytes target     prot opt in     out     source
>     destination
>       16  2582 ACCEPT     all  --  any    any     anywhere
>     10.88.1.54 <http://10.88.1.54>
>        0     0 ACCEPT     all  --  any    any     anywhere
>     10.88.4.171 <http://10.88.4.171>
>
>     Chain NoCat_Ports (1 references)
>     pkts bytes target     prot opt in     out     source
>     destination
>        0     0 DROP       tcp  --  br0    any     anywhere
>     anywhere            tcp dpt:smtp MARK match 0x3
>        0     0 DROP       udp  --  br0    any     anywhere
>     anywhere            udp dpt:25 MARK match 0x3
>
>     AW1:/tmp# ifconfig
>     br0       Link encap:Ethernet  HWaddr 00:02:6F:01:B9:71
>              inet addr:10.88.1.1 <http://10.88.1.1>  Bcast:
>     10.88.1.255 <http://10.88.1.255>  Mask:255.255.255.0
>     <http://255.255.255.0>
>              inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link
>              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>              RX packets:3383 errors:0 dropped:0 overruns:0 frame:0
>              TX packets:10966 errors:0 dropped:0 overruns:0 carrier:0
>              collisions:0 txqueuelen:0
>              RX bytes:462959 (452.1 KiB)  TX bytes:3603175 (3.4 MiB)
>
>     br0:0     Link encap:Ethernet  HWaddr 00:02:6F:01:B9:71
>              inet addr:172.27.0.10
>     <http://172.27.0.10>  Bcast:172.27.0.11
>     <http://172.27.0.11>  Mask:255.255.255.252 <http://255.255.255.252>
>              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>
>     eth0      Link encap:Ethernet  HWaddr 00:0C:42:03:06:37
>              inet addr:192.168.1.3
>     <http://192.168.1.3>  Bcast:192.168.1.255
>     <http://192.168.1.255>  Mask: 255.255.255.0 <http://255.255.255.0>
>              inet6 addr: fe80::20c:42ff:fe03:637/64 Scope:Link
>              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>              RX packets:3225 errors:0 dropped:0 overruns:0 frame:0
>              TX packets:9912 errors:0 dropped:0 overruns:0 carrier:0
>              collisions:0 txqueuelen:1000
>              RX bytes:3099662 (2.9 MiB)  TX bytes:907645 (886.3 KiB)
>              Interrupt:9 Base address:0x6000
>
>     eth1      Link encap:Ethernet  HWaddr 00:0C:42:03:06:38
>              inet addr: 169.254.88.1
>     <http://169.254.88.1>  Bcast:169.254.255.255
>     <http://169.254.255.255>  Mask:255.255.0.0 <http://255.255.0.0>
>              inet6 addr: fe80::20c:42ff:fe03:638/64 Scope:Link
>              UP BROADCAST MULTICAST  MTU:1500  Metric:1
>              RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>              TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>              collisions:0 txqueuelen:1000
>              RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
>              Interrupt:10 Base address:0x8000
>
>     lo        Link encap:Local Loopback
>              inet addr:127.0.0.1 <http://127.0.0.1>  Mask: 255.0.0.0
>     <http://255.0.0.0>
>              inet6 addr: ::1/128 Scope:Host
>              UP LOOPBACK RUNNING  MTU:16436  Metric:1
>              RX packets:74 errors:0 dropped:0 overruns:0 frame:0
>              TX packets:74 errors:0 dropped:0 overruns:0 carrier:0
>              collisions:0 txqueuelen:0
>              RX bytes:7353 (7.1 KiB)  TX bytes:7353 (7.1 KiB)
>
>     wifi0     Link encap:UNSPEC  HWaddr
>     00-02-6F-08-0F-2C-00-00-00-00-00-00-00-00-00-00
>              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>              RX packets:423978 errors:0 dropped:0 overruns:0 frame:0
>              TX packets:8088 errors:0 dropped:0 overruns:0 carrier:0
>              collisions:0 txqueuelen:1000
>              RX bytes:39413564 (37.5 MiB)  TX bytes:1198736 ( 1.1 MiB)
>              Interrupt:5 Base address:0x100
>
>     wifi1     Link encap:UNSPEC  HWaddr
>     00-02-6F-01-B9-71-00-01-00-00-00-00-00-00-00-00
>              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>              RX packets:370366 errors:0 dropped:0 overruns:0 frame:0
>              TX packets:10428 errors:0 dropped:0 overruns:0 carrier:0
>              collisions:0 txqueuelen:1000
>              RX bytes:34145423 (32.5 MiB)  TX bytes:3284732 (3.1 MiB)
>              Interrupt:11 Base address:0x180
>
>     wlan0     Link encap:Ethernet  HWaddr 00:02:6F:08:0F:2C
>              inet6 addr: fe80::202:6fff:fe08:f2c/64 Scope:Link
>              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>              RX packets:674 errors:0 dropped:1200 overruns:0 frame:0
>              TX packets:8083 errors:0 dropped:0 overruns:0 carrier:0
>              collisions:0 txqueuelen:0
>              RX bytes:121905 (119.0 KiB)  TX bytes:1198580 (1.1 MiB)
>              Interrupt:5 Base address:0x100
>
>     wlan1     Link encap:Ethernet  HWaddr 00:02:6F:01:B9:71
>              inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link
>              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>              RX packets:2723 errors:0 dropped:3310 overruns:0 frame:0
>              TX packets:10423 errors:0 dropped:0 overruns:0 carrier:0
>              collisions:0 txqueuelen:0
>              RX bytes:389604 (380.4 KiB)  TX bytes:3284574 (3.1 MiB)
>              Interrupt:11 Base address:0x180
>
>
>
>
>     _______________________________________________
>     NoCat mailing list
>     [email protected] <mailto:[email protected]>
>     http://lists.nocat.net/mailman/listinfo/nocat
>     <http://lists.nocat.net/mailman/listinfo/nocat>
>
>