Re: nocat can't fetch MAC from 1 hop away?
Drew <[email protected]> Mon, 27 Mar 2006 09:17:52 -0800
| Newsgroups | gmane.network.nocat |
|---|---|
| Message-ID | <[email protected]> |
I'm running in open mode, would pgp come into play here? Also, I get no loop when the client connects directly to the machine running nocat, and everything works fine there, but I do get the loop when the client connects to a machine 1 hop away (AW4) from the machine running nocat, which is routing to the machine with nocat (AW1). Sanket Desai wrote: > Hi Drew, > > If I am not making mistake your problem is due to pgp. If you search > archives of this list, you will find description of such problems and > solutions for that as well. In short, I don't think that problem is > "NoCat seems to not be able to get the MAC address of the client from > 1 hop away", but problem is pgp encryption,due to which you get login > page recursively. > > regards, > > Sanket. > > > On 3/27/06, *Drew* <[email protected] > <mailto:[email protected]>> wrote: > > internet---AW1---AW4 > > NoCatAuth lives on AW1 (10.88.1.1 <http://10.88.1.1>), and when I > connect a laptop > wirelessly to AW1, everything works great. But when I connect the same > laptop to AW4 (10.88.4.1 <http://10.88.4.1>), and try to go to > google, I get the splash > screen on AW1 come up, I hit login, but it loops back to the login > screen again, and gets quite a few errors in the nocat.log, which you > can see below, after the successful login to AW1. NoCat seems to > not be > able to get the MAC address of the client from 1 hop away, is that > normal? Any suggestions on things I can try? I've been strugging with > this problem for at least a year now. > > AW1: > [2006-03-26 13:46:23] Spawning child process 3684. > [2006-03-26 13:46:23] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.1.54 <http://10.88.1.54> > [2006-03-26 13:46:23] Peer 10.88.1.54 > <http://10.88.1.54> requests google.com <http://google.com> > [2006-03-26 13:46:23] Capturing peer 10.88.1.54 <http://10.88.1.54> > [2006-03-26 13:46:23] Spawning child process 3685. > [2006-03-26 13:46:23] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.1.54 <http://10.88.1.54> > [2006-03-26 13:46:23] Peer 10.88.1.54 > <http://10.88.1.54> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:46:23] Displaying splash page to peer 10.88.1.54 > <http://10.88.1.54> > [2006-03-26 13:46:23] Spawning child process 3686. > [2006-03-26 13:46:23] Spawning child process 3687. > [2006-03-26 13:46:24] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.1.54 <http://10.88.1.54> > [2006-03-26 13:46:24] Peer 10.88.1.54 > <http://10.88.1.54> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:46:24] Attempting to serve > /usr/share/nocatauth/gateway/htdocs//images/login.gif > [2006-03-26 13:46:24] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.1.54 <http://10.88.1.54> > [2006-03-26 13:46:24] Peer 10.88.1.54 > <http://10.88.1.54> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:46:24] Attempting to serve > /usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif > > **pressed login button here. > > [2006-03-26 13:46:32] Spawning child process 3688. > [2006-03-26 13:46:32] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.1.54 <http://10.88.1.54> > [2006-03-26 13:46:32] Peer 10.88.1.54 > <http://10.88.1.54> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:46:32] Opening portal for 10.88.1.54 > <http://10.88.1.54> to http://google.com/ > [2006-03-26 13:46:32] User () v. trusted (Any) > [2006-03-26 13:46:32] User permitted in class Public > [2006-03-26 13:46:32] Notifying parent of Permit on peer > 00:02:2D:28:BB:F4 > [2006-03-26 13:46:32] Got notification Permit of peer > 00:02:2D:28:BB:F4 > [2006-03-26 13:46:32] Child process returned 1 > > AW4: > [2006-03-26 13:47:55] Spawning child process 3696. > [2006-03-26 13:47:55] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:47:55] Peer 10.88.4.171 > <http://10.88.4.171> requests www.google.com <http://www.google.com> > [2006-03-26 13:47:55] Capturing peer 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:47:55] Spawning child process 3697. > [2006-03-26 13:47:55] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:47:55] Peer 10.88.4.171 > <http://10.88.4.171> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:47:55] Displaying splash page to peer 10.88.4.171 > <http://10.88.4.171> > > **pressed login button here. > > [2006-03-26 13:48:34] Spawning child process 3700. > [2006-03-26 13:48:34] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:48:34] Peer 10.88.4.171 > <http://10.88.4.171> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:48:34] Opening portal for 10.88.4.171 > <http://10.88.4.171> to > http://www.google.com/ > [2006-03-26 13:48:34] Use of uninitialized value in hash element at > /usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369. > [2006-03-26 13:48:34] User () v. trusted (Any) > iptables v1.2.11: Bad mac address `none' > Try `iptables -h' or 'iptables --help' for more information. > [2006-03-26 13:48:34] User permitted in class Public > [2006-03-26 13:48:34] Use of uninitialized value in chomp at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226. > [2006-03-26 13:48:34] Use of uninitialized value in join or string at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229. > [2006-03-26 13:48:34] Notifying parent of Permit on peer > [2006-03-26 13:48:34] Use of uninitialized value in join or string at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 151. > [2006-03-26 13:48:34] Use of uninitialized value in chomp at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 226. > [2006-03-26 13:48:34] Use of uninitialized value in join or string at > /usr/share/nocatauth/gateway/bin/../lib/NoCat.pm line 229. > [2006-03-26 13:48:34] Got notification Permit of peer > [2006-03-26 13:48:34] Use of uninitialized value in hash element at > /usr/share/nocatauth/gateway/bin/../lib/NoCat/Gateway.pm line 369. > [2006-03-26 13:48:34] Child process returned 1 > [2006-03-26 13:48:35] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:48:35] Spawning child process 3704. > [2006-03-26 13:48:35] Peer 10.88.4.171 > <http://10.88.4.171> requests www.google.com <http://www.google.com> > [2006-03-26 13:48:35] Capturing peer 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:48:35] Spawning child process 3705. > [2006-03-26 13:48:35] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:48:35] Peer 10.88.4.171 > <http://10.88.4.171> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:48:35] Displaying splash page to peer 10.88.4.171 > <http://10.88.4.171> > [2006-03-26 13:48:35] Spawning child process 3706. > [2006-03-26 13:48:35] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:48:35] Spawning child process 3707. > [2006-03-26 13:48:35] Connection to 10.88.1.1 <http://10.88.1.1> > from 10.88.4.171 <http://10.88.4.171> > [2006-03-26 13:48:35] Peer 10.88.4.171 > <http://10.88.4.171> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:48:35] Attempting to serve > /usr/share/nocatauth/gateway/htdocs//images/auth_logo.gif > [2006-03-26 13:48:35] Peer 10.88.4.171 > <http://10.88.4.171> requests 10.88.1.1 <http://10.88.1.1> > [2006-03-26 13:48:35] Attempting to serve > /usr/share/nocatauth/gateway/htdocs//images/login.gif > > > AW1:/tmp# iptables -L -v > Chain INPUT (policy ACCEPT 2725 packets, 210K bytes) > pkts bytes target prot opt in out source > destination > > Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) > pkts bytes target prot opt in out source > destination > 27 4256 NoCat all -- any any anywhere > anywhere > > Chain OUTPUT (policy ACCEPT 3727 packets, 252K bytes) > pkts bytes target prot opt in out source > destination > > Chain NoCat (1 references) > pkts bytes target prot opt in out source > destination > 27 4256 NoCat_Ports all -- any any anywhere > anywhere > 27 4256 NoCat_Inbound all -- any any anywhere > anywhere > 0 0 ACCEPT all -- br0 any 10.88.1.0/24 > <http://10.88.1.0/24> > anywhere MARK match 0x1 > 0 0 ACCEPT all -- br0 any 10.88.1.0/24 > <http://10.88.1.0/24> > anywhere MARK match 0x2 > 8 1510 ACCEPT all -- br0 any 10.88.1.0/24 > <http://10.88.1.0/24> > anywhere MARK match 0x3 > 0 0 ACCEPT tcp -- any any 10.88.1.0/24 > <http://10.88.1.0/24> > mouse.nocat.net <http://mouse.nocat.net> tcp dpt:www > 0 0 ACCEPT tcp -- any any mouse.nocat.net > <http://mouse.nocat.net> > 10.88.1.0/24 <http://10.88.1.0/24> tcp spt:www > 0 0 ACCEPT tcp -- any any 10.88.1.0/24 > <http://10.88.1.0/24> > mouse.nocat.net <http://mouse.nocat.net> tcp dpt:https > 0 0 ACCEPT tcp -- any any mouse.nocat.net > <http://mouse.nocat.net> > 10.88.1.0/24 <http://10.88.1.0/24> tcp spt:https > 0 0 ACCEPT all -- any br0 192.168.1.1 > <http://192.168.1.1> > 10.88.1.0/24 <http://10.88.1.0/24> > 0 0 ACCEPT tcp -- br0 any 10.88.1.0/24 > <http://10.88.1.0/24> > 192.168.1.1 <http://192.168.1.1> tcp dpt:domain > 0 0 ACCEPT udp -- br0 any 10.88.1.0/24 > <http://10.88.1.0/24> > 192.168.1.1 <http://192.168.1.1> udp dpt:domain > 0 0 ACCEPT all -- br0 any 172.27.0.8/30 > <http://172.27.0.8/30> > anywhere MARK match 0x1 > 0 0 ACCEPT all -- br0 any 172.27.0.8/30 > <http://172.27.0.8/30> > anywhere MARK match 0x2 > 0 0 ACCEPT all -- br0 any 172.27.0.8/30 > <http://172.27.0.8/30> > anywhere MARK match 0x3 > 0 0 ACCEPT tcp -- any any 172.27.0.8/30 > <http://172.27.0.8/30> > mouse.nocat.net <http://mouse.nocat.net> tcp dpt:www > 0 0 ACCEPT tcp -- any any mouse.nocat.net > <http://mouse.nocat.net> > 172.27.0.8/30 <http://172.27.0.8/30> tcp spt:www > 0 0 ACCEPT tcp -- any any 172.27.0.8/30 > <http://172.27.0.8/30> > mouse.nocat.net <http://mouse.nocat.net> tcp dpt:https > 0 0 ACCEPT tcp -- any any mouse.nocat.net > <http://mouse.nocat.net> > 172.27.0.8/30 <http://172.27.0.8/30> tcp spt:https > 0 0 ACCEPT all -- any br0 192.168.1.1 > <http://192.168.1.1> > 172.27.0.8/30 <http://172.27.0.8/30> > 0 0 ACCEPT tcp -- br0 any 172.27.0.8/30 > <http://172.27.0.8/30> > 192.168.1.1 <http://192.168.1.1> tcp dpt:domain > 0 0 ACCEPT udp -- br0 any 172.27.0.8/30 > <http://172.27.0.8/30> > 192.168.1.1 <http://192.168.1.1> udp dpt:domain > 0 0 DROP tcp -- eth0 any !mouse.nocat.net > anywhere tcp dpt:5280 > 3 164 DROP all -- any any anywhere > anywhere > > Chain NoCat_Inbound (1 references) > pkts bytes target prot opt in out source > destination > 16 2582 ACCEPT all -- any any anywhere > 10.88.1.54 <http://10.88.1.54> > 0 0 ACCEPT all -- any any anywhere > 10.88.4.171 <http://10.88.4.171> > > Chain NoCat_Ports (1 references) > pkts bytes target prot opt in out source > destination > 0 0 DROP tcp -- br0 any anywhere > anywhere tcp dpt:smtp MARK match 0x3 > 0 0 DROP udp -- br0 any anywhere > anywhere udp dpt:25 MARK match 0x3 > > AW1:/tmp# ifconfig > br0 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71 > inet addr:10.88.1.1 <http://10.88.1.1> Bcast: > 10.88.1.255 <http://10.88.1.255> Mask:255.255.255.0 > <http://255.255.255.0> > inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:3383 errors:0 dropped:0 overruns:0 frame:0 > TX packets:10966 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:462959 (452.1 KiB) TX bytes:3603175 (3.4 MiB) > > br0:0 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71 > inet addr:172.27.0.10 > <http://172.27.0.10> Bcast:172.27.0.11 > <http://172.27.0.11> Mask:255.255.255.252 <http://255.255.255.252> > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > eth0 Link encap:Ethernet HWaddr 00:0C:42:03:06:37 > inet addr:192.168.1.3 > <http://192.168.1.3> Bcast:192.168.1.255 > <http://192.168.1.255> Mask: 255.255.255.0 <http://255.255.255.0> > inet6 addr: fe80::20c:42ff:fe03:637/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:3225 errors:0 dropped:0 overruns:0 frame:0 > TX packets:9912 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:3099662 (2.9 MiB) TX bytes:907645 (886.3 KiB) > Interrupt:9 Base address:0x6000 > > eth1 Link encap:Ethernet HWaddr 00:0C:42:03:06:38 > inet addr: 169.254.88.1 > <http://169.254.88.1> Bcast:169.254.255.255 > <http://169.254.255.255> Mask:255.255.0.0 <http://255.255.0.0> > inet6 addr: fe80::20c:42ff:fe03:638/64 Scope:Link > UP BROADCAST MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) > Interrupt:10 Base address:0x8000 > > lo Link encap:Local Loopback > inet addr:127.0.0.1 <http://127.0.0.1> Mask: 255.0.0.0 > <http://255.0.0.0> > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:74 errors:0 dropped:0 overruns:0 frame:0 > TX packets:74 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:7353 (7.1 KiB) TX bytes:7353 (7.1 KiB) > > wifi0 Link encap:UNSPEC HWaddr > 00-02-6F-08-0F-2C-00-00-00-00-00-00-00-00-00-00 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:423978 errors:0 dropped:0 overruns:0 frame:0 > TX packets:8088 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:39413564 (37.5 MiB) TX bytes:1198736 ( 1.1 MiB) > Interrupt:5 Base address:0x100 > > wifi1 Link encap:UNSPEC HWaddr > 00-02-6F-01-B9-71-00-01-00-00-00-00-00-00-00-00 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:370366 errors:0 dropped:0 overruns:0 frame:0 > TX packets:10428 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:34145423 (32.5 MiB) TX bytes:3284732 (3.1 MiB) > Interrupt:11 Base address:0x180 > > wlan0 Link encap:Ethernet HWaddr 00:02:6F:08:0F:2C > inet6 addr: fe80::202:6fff:fe08:f2c/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:674 errors:0 dropped:1200 overruns:0 frame:0 > TX packets:8083 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:121905 (119.0 KiB) TX bytes:1198580 (1.1 MiB) > Interrupt:5 Base address:0x100 > > wlan1 Link encap:Ethernet HWaddr 00:02:6F:01:B9:71 > inet6 addr: fe80::202:6fff:fe01:b971/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:2723 errors:0 dropped:3310 overruns:0 frame:0 > TX packets:10423 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:389604 (380.4 KiB) TX bytes:3284574 (3.1 MiB) > Interrupt:11 Base address:0x180 > > > > > _______________________________________________ > NoCat mailing list > [email protected] <mailto:[email protected]> > http://lists.nocat.net/mailman/listinfo/nocat > <http://lists.nocat.net/mailman/listinfo/nocat> > >