Re: [beagleboard] Disable SoftAP routing

2018-02-13 Thread ferdster
That works if I only wanted SSH, but I still want to be able to access the 
webserver on the BB.

If I add another rule for port 80, we're back to square one where it routes 
incoming web requests on SoftAP to wlan0.

On Tuesday, February 13, 2018 at 4:15:53 PM UTC-7, RobertCNelson wrote:
>
>
> i think.. 
>
> iptables -A INPUT -i SoftAp0 -p tcp ! --dport 22 -j DROP 
>
> then you can ssh into SoftAP0... 
>
> Regards, 
>
> -- 
> Robert Nelson 
> https://rcn-ee.com/ 
>

-- 
For more options, visit http://beagleboard.org/discuss
--- 
You received this message because you are subscribed to the Google Groups 
"BeagleBoard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to beagleboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/beagleboard/9959b248-7ef7-47ce-a758-7440b1b64b01%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [beagleboard] Disable SoftAP routing

2018-02-13 Thread Robert Nelson
On Tue, Feb 13, 2018 at 5:10 PM, ferdster  wrote:
> If I set TETHER_ENABLED=no, then I lose the SoftAP interface completely. I
> still want the SoftAP, I just don't want data to be routed between the
> SoftAP and wlan0 (or 4G or USB eth0, etc).
>
> I am not very familiar with it, but is it something in iptables? Initially
> it was:
> debian@beaglebone:~$ sudo iptables -S
> -P INPUT ACCEPT
> -P FORWARD ACCEPT
> -P OUTPUT ACCEPT
> -A FORWARD -i wlan0 -o SoftAp0 -m state --state RELATED,ESTABLISHED -j
> ACCEPT
> -A FORWARD -i SoftAp0 -o wlan0 -j ACCEPT
>
> I tried removing the last two lines to make it:
> debian@beaglebone:~$ sudo iptables -S
> -P INPUT ACCEPT
> -P FORWARD ACCEPT
> -P OUTPUT ACCEPT
>
> But, that still didn't stop internet access while connected to the SoftAP.

i think..

iptables -A INPUT -i SoftAp0 -p tcp ! --dport 22 -j DROP

then you can ssh into SoftAP0...

Regards,

-- 
Robert Nelson
https://rcn-ee.com/

-- 
For more options, visit http://beagleboard.org/discuss
--- 
You received this message because you are subscribed to the Google Groups 
"BeagleBoard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to beagleboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/beagleboard/CAOCHtYhfTtrEHN%3DPDD9vDttPZ7s9LygtSkRksSirfcDYFcQYuQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [beagleboard] Disable SoftAP routing

2018-02-13 Thread ferdster
If I set TETHER_ENABLED=no, then I lose the SoftAP interface completely. I 
still want the SoftAP, I just don't want data to be routed between the 
SoftAP and wlan0 (or 4G or USB eth0, etc).

I am not very familiar with it, but is it something in iptables? Initially 
it was:
debian@beaglebone:~$ sudo iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A FORWARD -i wlan0 -o SoftAp0 -m state --state RELATED,ESTABLISHED -j 
ACCEPT
-A FORWARD -i SoftAp0 -o wlan0 -j ACCEPT

I tried removing the last two lines to make it:
debian@beaglebone:~$ sudo iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT

But, that still didn't stop internet access while connected to the SoftAP.

Thanks.

On Tuesday, February 13, 2018 at 3:02:40 PM UTC-7, RobertCNelson wrote:
>
>
> SoftAP is controlled thru /etc/default/bb-wl18xx 
>
> Regards, 
>
> -- 
> Robert Nelson 
> https://rcn-ee.com/ 
>

-- 
For more options, visit http://beagleboard.org/discuss
--- 
You received this message because you are subscribed to the Google Groups 
"BeagleBoard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to beagleboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/beagleboard/4c520488-969b-4090-a098-bbbc0e706175%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [beagleboard] Disable SoftAP routing

2018-02-13 Thread Robert Nelson
On Tue, Feb 13, 2018 at 3:58 PM, ferdster  wrote:
> Hi,
>
> Using the latest "Debian 9.3 2018-01-28 4GB SD IoT", I'd like to disable
> routing between any of the interfaces. If I have wlan0 configured to connect
> to the internet, I don't want being connected to the SoftAP to give me
> internet access. I plan to install a 4G module and I definitely don't want
> the BB to become an internet access point. I just want to use the SoftAP as
> an easy way to access the BB (ssh and web).

SoftAP is controlled thru /etc/default/bb-wl18xx

Regards,

-- 
Robert Nelson
https://rcn-ee.com/

-- 
For more options, visit http://beagleboard.org/discuss
--- 
You received this message because you are subscribed to the Google Groups 
"BeagleBoard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to beagleboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/beagleboard/CAOCHtYiqZLWZNrAvNSEV1wEJ4s4E%2BQBqUhjhK-kgbjEM0Xit6Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[beagleboard] Disable SoftAP routing

2018-02-13 Thread ferdster
Hi,

Using the latest "Debian 9.3 2018-01-28 4GB SD IoT", I'd like to disable 
routing between any of the interfaces. If I have wlan0 configured to 
connect to the internet, I don't want being connected to the SoftAP to give 
me internet access. I plan to install a 4G module and I definitely don't 
want the BB to become an internet access point. I just want to use the 
SoftAP as an easy way to access the BB (ssh and web).

Thanks.

-- 
For more options, visit http://beagleboard.org/discuss
--- 
You received this message because you are subscribed to the Google Groups 
"BeagleBoard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to beagleboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/beagleboard/25e7bf69-ac8e-4797-9cd3-06b0ee86309a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.