Where I can check resolv.conf?


Da: Durand fabrice via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Inviato: venerdì 11 agosto 2017 01.50
A: packetfence-users@lists.sourceforge.net
Cc: Durand fabrice <fdur...@inverse.ca>
Oggetto: Re: [PacketFence-users] R: R: R: R: network-access-detection


Hello Alessandro,

what is the result of ? :

cat /proc/sys/net/ipv4/ip_forward
From the pf server are you able to do a query ?
nslookup
> server 153.47.30.113
> inverse.ca

Regards
Fabrice

Le 2017-08-10 à 13:42, Alessandro Canella via PacketFence-users a écrit :
Here some test:

BEFORE  LOGIN

  Suffisso DNS specifico per connessione: inlinel2.feo-cer.net
   Indirizzo IPv4. . . . . . . . . . . . : 192.168.30.14(Preferenziale)
   Gateway predefinito . . . . . . . . . : 192.168.30.1
   Server DHCP . . . . . . . . . . . . . : 192.168.30.1
   Server DNS . . . . . . . . . . . . .  : 153.47.30.113
C:\Users\aless>nslookup
Server predefinito:  UnKnown
Address:  153.47.30.113

lancelot.feo-cer.net
Server:  UnKnown
Address:  153.47.30.113
Nome:    percival.feo-cer.net
Address:  192.168.30.1
Aliases:  lancelot.feo-cer.net.inlinel2.feo-cer.net


AFTER LOGIN

C:\Users\aless>nslookup
DNS request timed out.
    timeout was 2 seconds.
Server predefinito:  UnKnown
Address:  153.47.30.113

> server 192.168.30.1
DNS request timed out.
    timeout was 2 seconds.
Server predefinito:  [192.168.30.1]
Address:  192.168.30.1

As you see from image attached, portscan …works….query not….

Da: Alessandro Canella via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Inviato: giovedì 10 agosto 2017 09.42
A: 
packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>
Cc: Alessandro Canella 
<alessandro.cane...@itcare.it><mailto:alessandro.cane...@itcare.it>
Oggetto: [PacketFence-users] R: R: R: network-access-detection

Fabrice,

I made a test with nslookup. My first hop (PF inline IF) is closed and cannot 
reach a remote DNS too. Note that other proto seems ok.



Da: Fabrice Durand via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Inviato: martedì 8 agosto 2017 14.37
A: 
packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>
Cc: Fabrice Durand <fdur...@inverse.ca<mailto:fdur...@inverse.ca>>
Oggetto: Re: [PacketFence-users] R: R: network-access-detection


Hello Alessandro,

you probably missconfigured the dns.

Can you give me your networks.conf ?

Regards

Fabrice



Le 2017-08-07 à 11:51, Alessandro Canella via PacketFence-users a écrit :
I’ve retried and checked traffic.

As wrotten, I’m in inline, users authenticate but GIF cannot be retrieved.

But not only : from a successful registered client, I cannot query DNS. And any 
other packet works fine….


How I can check where is “deny” that stops me?



Da: Alessandro Canella via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Inviato: venerdì 4 agosto 2017 08.18
A: Ludovic Zammit <lzam...@inverse.ca><mailto:lzam...@inverse.ca>; 
packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>
Cc: Alessandro Canella 
<alessandro.cane...@itcare.it><mailto:alessandro.cane...@itcare.it>
Oggetto: [PacketFence-users] R: network-access-detection

Hello Ludovic,

I’ve tried with Win10, tested with both IP (I know, if I test the first 
reachable is not correct…) I’ve leaved Vlan Enforce due to incopatibility of 
switches, so I’m in inline mode.

I will try to raise timeout to 90 secs and to open it by hand in new tab.

Later I will recap tests.

Thanks in advance.





Da: Ludovic Zammit [mailto:lzam...@inverse.ca]
Inviato: giovedì 3 agosto 2017 19.40
A: 
packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>
Cc: Alessandro Canella 
<alessandro.cane...@itcare.it<mailto:alessandro.cane...@itcare.it>>
Oggetto: Re: [PacketFence-users] network-access-detection

Hello Alessandra,

Are you using Mac OS X ? Which PacketFence version are you using ?

By default on the ZEN it will try to reach our public IP.

Once you get authorize after the registration process you will need to check if 
you have placed into the correct vlan (In VLAN enforcement mode) and got the 
proper IP address.

Check also if you have internet, it's known for Mac OS X devices that they are 
slow to release their IP and pickup the new one (~90secs).

Try to have a tab open on the network-access-detection.gif and see if it loads 
after the registration process.

Thanks,

Ludovic Zammit

lzam...@inverse.ca<mailto:lzam...@inverse.ca> ::  +1.514.447.4918 (x145) ::  
www.inverse.ca<http://www.inverse.ca>

Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)



On Aug 3, 2017, at 11:41 AM, Alessandro Canella via PacketFence-users 
<packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>>
 wrote:

Hello all,

I still have problem detecting  /common/network-access-detection.gif after 
access is granted. I’m using ZEN version.

I’ve tried lot of different config. All seems fine, gif is reachable from both 
side of inline mode but “unable to detect” is the last portal page that I seen.

Any ideas about which log explore?



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org<http://slashdot.org/>! 
http://sdm.link/slashdot_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users





------------------------------------------------------------------------------

Check out the vibrant tech community on one of the world's most

engaging tech sites, Slashdot.org! http://sdm.link/slashdot




_______________________________________________

PacketFence-users mailing list

PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net>

https://lists.sourceforge.net/lists/listinfo/packetfence-users


--

Fabrice Durand

fdur...@inverse.ca<mailto:fdur...@inverse.ca> ::  +1.514.447.4918 (x135) ::  
www.inverse.ca<http://www.inverse.ca>

Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)




------------------------------------------------------------------------------

Check out the vibrant tech community on one of the world's most

engaging tech sites, Slashdot.org! http://sdm.link/slashdot




_______________________________________________

PacketFence-users mailing list

PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net>

https://lists.sourceforge.net/lists/listinfo/packetfence-users

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to