<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
yeh, i got it working now. forgot to put a return route from the other
subnet <span class="moz-smiley-s1"><span> :-) </span></span><br>
<br>
Dan Flett wrote:<br>
<blockquote type="cite"
cite="mid000d01c4833c$7cf3ded0$0264a8c0@flett.com.au">
<pre wrap="">Hi All,
</pre>
<blockquote type="cite">
<pre wrap="">I'm just playing with the same thing, but using windows boxes. I came
across OpenVPN which seems to work well, and is easy enough to setup,
though haven't got the routing quite figured out yet (XP pro doesnt
</pre>
</blockquote>
<pre wrap=""><!---->make
</pre>
<blockquote type="cite">
<pre wrap="">the nicest routers, but it was handy)
<a class="moz-txt-link-freetext" href="http://openvpn.sourceforge.net/">http://openvpn.sourceforge.net/</a>
</pre>
</blockquote>
<pre wrap=""><!---->
I've been using OpenVPN for a while now - I use it across the Internet
and across the Melbourne Wireless network (well at wherever there's a
node that's connected to my node). I found it a bit of a pain to set up
for Linux, but that may be my lack of compilation experience at the
time. It's available as a package now.
</pre>
<blockquote type="cite">
<pre wrap="">Rowan Crowe wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Using an "... over ..." solution also means that I can set things up
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->to
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">allow an unencrypted backdoor for people who stumble across the AP.
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->For
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">example, any direct IP access on port 80 brings up a web page with
information on how to configure PPTP settings.
Any experiences or suggestions are appreciated...
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->
On my Melbourne Wireless node I redirect port 80 for anyone who stumbles
across it. It works as follows:
* My Node PC runs DHCP: to recognised MAC addresses it gives specific
unique IP addresses, to unrecognised MAC addresses it gives addresses
from a different range.
* My Node PC also runs DNS (TinyDNS/DJBDNS): It is connected via my
internal network to my Internet Router PC and is a caching DNS server.
So anyone connected to my node can resolve Internet domain names to
Internet IP addresses, as well as Melbourne wireless domain names and
IPs.
* My firewall (Shorewall) redirects any port 80 requests from any
clients who have IP addresses in my DHCP 'unrecognised MAC' range to
port 8081 on the router.
* I have an Apache 'Virtual Host' webserver running on port 8081 which
first brings up a brief "you are being redirected" page. This page
redirects client's browsers to a "Welcome To My Node" page which
explains what's going on, and what Melbourne Wireless is all about. I
have also configured an Apache 404 error page that redirects clients to
the Welcome page.
* My firewall does not redirect any port 80 requests to IP addresses in
the 10.10.0.0/16 range, so my visitors are free to browse my Node's
website and the websites of other nodes on the network.
On a node not connected to the Internet you could set up a name-serving
DNS server that simply directs all Internet Top-Level Domains to the IP
address of your node.
Another simpler way to achieve this is to use a "Captive Portal"
application such as NoCatAuth (<a class="moz-txt-link-freetext" href="http://nocat.net/">http://nocat.net/</a>) which uses it's own
authentication system or ChilliSpot (<a class="moz-txt-link-freetext" href="http://www.chillispot.org/">http://www.chillispot.org/</a>) which
relies on a RADIUS authentication server. I'm not sure how these
programs do what they do, but you probably don't need to run a DNS
server to make them work.
Cheers,
Dan
To unsubscribe: send mail to <a class="moz-txt-link-abbreviated" href="mailto:majordomo@wireless.org.au">majordomo@wireless.org.au</a>
with "unsubscribe melbwireless" in the body of the message
</pre>
</blockquote>
<br>
</body>
</html>
To unsubscribe: send mail to majordomo@wireless.org.au
with "unsubscribe melbwireless" in the body of the message