Here it is, Fabrice 10.0.254.3 is the WiFi client and 172.16.0.222 is PF.
Tcpdump.pcap is attached and it is made right on PF The second capture is made on the laptop connected to guest WiFi. It contains pings to PF but all TCP SYN requests all are answered with RST. Eugene From: Durand fabrice via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: Sunday, February 18, 2018 10:51 AM To: packetfence-users@lists.sourceforge.net Cc: Durand fabrice <fdur...@inverse.ca> Subject: Re: [PacketFence-users] Access to PF captive portal is blocked Hello Eugene, do you have the capture ? Regards Fabrice Le 2018-02-15 à 23:12, E.P. via PacketFence-users a écrit : Hi Fabrice, I dare sending it again believing my previous email fell into cracks. Can you please advise what could be wrong (see below) Eugene From: E.P. [mailto:ype...@gmail.com] Sent: Wednesday, February 14, 2018 1:08 AM To: packetfence-users@lists.sourceforge.net <mailto:packetfence-users@lists.sourceforge.net> Subject: Access to PF captive portal is blocked Hello folks, I really hope someone who ran into a similar problem will shed some light. Feeling bad we dont hear anything from Fabrice or someone from inverse. I have an out-of-band deployment of PF and my WiFi client gets connected and redirected to PF I see redirects by capturing the traffic on PF by tcpdump. But I see that PF sends TCP resets even for TCP SYN packet coming from the client. It seems to me it is just iptables firewall that blocks it. Why ? Where am I supposed to enter those IP addresses that are allowed to go through captive portal registration? I do allow PF IP address in the pre-authorization access list and my ping to FQDN of PF succeeds normally. It is only HTTP(s) doesnt go through. Even manually entered URL in the client browser doesnt open up any page, i.e. https://pf.blabla.com/captive-portal or https://172.16.0.222/captive-portal Eugene ---------------------------------------------------------------------------- -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net <mailto:PacketFence-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/packetfence-users
tcpdump.pcap
Description: Binary data
laptop capture.pcap
Description: Binary data
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
