Configuring NoDogSplash

[jetak]

I have a TL-WDR4300v1 running Gargoyle 1.5.11 which Ill call R2. This router is set up as a Client+AP using another router R1 (WRT54GS dd-wrt) as the gateway.

[Gateway R1] 192.168.1.1 -->192.168.1.6 [Client+AP R2] 192.168.2.1 --> Lan 192.168.2.0/24

I installed nodogsplash with no problems. But the only way I can access the splash page is by going directly to 192.168.2.1. If I do this I can authenticate just fine and continue onto other sites.

If I instead try to directly go to, say http://www.google.com, the splash page never comes up and the page just hangs. I understand that the page will hang because I am not authenticated.

If I try to ping http://www.google.com before I am authenticated the request times out as expected. If I then try to ping http://www.google.com after I authenticate the request comes back as Destination Port Unreachable as opposed to simply timing out.

I have tried manually configuring nodosplash to use br-lan (192.168.4.1) as the GatewayInterface and br-wan(192.168.1.6) as the ExternalInterface as defined in nodogsplash.conf. (http://wiki.openwrt.org/doc/howto/wirel ... odogsplash)

I have also tried configuring the GatewayAddress as both 192.168.2.1 and 192.168.1.6 with no change in outcome.

NoDogSplash uses a web server to listen to the GatewayAddress on port 2050 for http GET requests. Looking at debug logs it seems to me that when I go to any other IP besides 192.168.2.1 this web server cannot see the traffic, it is bypassing the GatewayAddress.

I dont know if the problem is in how gargoyle does NAT or a conflict between iptables in nodogspalsh and gargoyle or what.

I have done a lot or searching and trying other solutions and now Im stumped.
Thanks for any help.

[ispyisail]

If you get it working in interested in how you did it

[jetak]

So more weirdness.

If I authenticate my computer, then open up some webpages in different tabs, then deauthenticate by either restarting nodogsplash or just deauth the computers IP, I can get to the splash page by reloading some of the previously open tabs.

Not all the previously opened webpages(tabs) work though. This forum for one works while http://www.github.com did not. Also http://www.google.com does not bring up a splash page but google.com without the www works. [Edit] (This may be a fluke, haven't been able to replicate) [/Edit] I tried other webpages without the www preface such as github.com but this did not work.

I really don't know enough (yet) about NAT and DNS to really know what's going but I'm going to keep playing with it. Im getting closer.

[Edit 2]
Above I was only trying with tabs that had previously been opened prior to deauthentication. I now tried with a website I have never been to before, ever, www.sanduskyregister.com. And it worked, the splash screen came up.

[jetak]

Another interesting tidbit I forgot to mention.

Without nodogsplash running I can ping the gateway router R1 192.168.1.1 just fine from my laptop and from R2 as expected.

With nodogsplash and my computer not authenticated, I cannot ping R1 from my laptop as expected though I can ping R1 from R2.

With my computer authenticated I still cannot ping R1 and I cannot ping R2, both come back with Destination Port Unreachable:

Computer to R1 with nodogsplash running and computer authenticated:

Code: Select all

jetak@laptop:/$ ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1): 56 data bytes
92 bytes from gateway.lan (192.168.2.1): Destination Port Unreachable
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 42f4   0 0000  3f  01 af72 192.168.2.241  192.168.1.1 

Computer to R2 with nodogsplash running and computer authenticated:

Code: Select all

jetak@laptop:/$ ping 192.168.2.1
PING 192.168.2.1 (192.168.2.1): 56 data bytes
92 bytes from gateway.lan (192.168.2.1): Destination Port Unreachable
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 14f8   0 0000  40  01 db6e 192.168.2.241  192.168.2.1