Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-03-05 Thread Terry Coles
On Monday, 5 March 2018 12:40:40 GMT Ralph Corderoy wrote: > It needs to be a few steps printed big and stuck on a wall away from the > booth to avoid clogging the area. The QR code should be present because > you might be surprised how many phones handle it without an explicit > app, and it's a

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-03-05 Thread Terry Coles
On Sunday, 4 March 2018 21:07:41 GMT Stephen Wolff wrote: > i don’t think you’ll be able to get another certificate for > wimborne-modeltown.com. You might be able to get one for a subdomain or > a wildcard (ie *.modeltown.com). You’re likely to need some way to This will be the first certificate

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-03-05 Thread Ralph Corderoy
Hi Terry, > The problem is that the people who man the pay-booth have no idea > about any of this and struggle to explain the procedure to people > who've tried to get onto our WiFi network, so the thinking is that > it'll be less hassle anyway. It needs to be a few steps printed big and stuck

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-03-04 Thread Terry Coles
On Sunday, 4 March 2018 13:25:43 GMT Ralph Corderoy wrote: > > and this... > > Nothing followed. You're probably pasting those NUL bytes into > Thunderbird again. :-) Nope. I just didn't make myself very clear. I asked those two questions (about getting Certs for wimborne-modeltown.com)

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-03-04 Thread Ralph Corderoy
Hi Terry, > and this... Nothing followed. You're probably pasting those NUL bytes into Thunderbird again. :-) Cheers, Ralph. -- Next meeting: Bournemouth, Tuesday, 2018-03-06 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ New thread:

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-03-03 Thread Terry Coles
On Thursday, 1 March 2018 07:01:28 GMT Terry Coles wrote: > I don't suppose it would work if we got a Certificate for wimborne- > modeltown.com and added that to the DNS on the internal server, then simply > told them to go to WMT.com which would also be available on that server? > (Maybe by

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-28 Thread Terry Coles
On Wednesday, 28 February 2018 21:33:10 GMT Ralph Corderoy wrote: > I still think this idea of trying to fool your paying public that > they're on the Internet, since they won't get the `you're captured' UI > that's familiar to them, just leaves them confused when they can't post > their photos to

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-28 Thread Ralph Corderoy
Hi Terry, > Our idea is to register a new domain for the WMT, such as > WMTGuide.com. I still think this idea of trying to fool your paying public that they're on the Internet, since they won't get the `you're captured' UI that's familiar to them, just leaves them confused when they can't post

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-28 Thread Terry Coles
I just realised that my reply yesterday only went to Ian and not the list; those pesky CCs again. On Sunday, 25 February 2018 12:55:45 GMT you wrote: Ian, > You could create your own CA ... but anyone using the site will still > get the error unless they (manually) install your CA root cert.

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-25 Thread Terry Coles
On Sunday, 25 February 2018 13:11:59 GMT Ralph Corderoy wrote: > Your self-signed certificate is not signed by one of those trusted > authorities, thus ERR_CERT_AUTHORITY_INVALID. If you were using your > proper public domain name, on this private network, then you might > already have a

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-25 Thread Ralph Corderoy
Hi Terry, > NET::ERR_CERT_AUTHORITY_INVALID ... > This server could not prove that it is wmt.com; its security > certificate is not trusted by your computer's operating system. This > may be caused by a misconfiguration or an attacker intercepting your > connection. > > So is it mis-configuration

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-25 Thread Ian Morris
The reason for the error is because your certificate is not signed by one of the trusted Certificate authorities ... indeed the certificate you have is self signed, it's not signed by any CA. You could create your own CA ... but anyone using the site will still get the error unless they

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-25 Thread Terry Coles
On Sunday, 25 February 2018 08:04:49 GMT Terry Coles wrote: > > You can trying listening on TCP port 443 and seeing if Android 7 will > > play along with your self-signed certificates. Perhaps it will as far > > as thinking it's got to the Internet, but that Java source I referenced > > also

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-25 Thread Terry Coles
On Saturday, 24 February 2018 23:40:56 GMT Ralph Corderoy wrote: > It should be packets 12 and 13; you could run the tcpdump command and > compare it to Wireshark's display. /etc/services says https is TCP port > 443. I have now received a response to my question about where https is used from

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Ralph Corderoy
Hi Terry, > > I've looked at the files with this command that gives packet numbers > > to reference. > > > > tcpdump -vvvKnt# -r $packet_file > > I used Wireshark as you originally recommended. Yes, I thought that would be more suitable if packets are new to you. I don't have it

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Terry Coles
On Saturday, 24 February 2018 20:19:27 GMT Hamish MB wrote: > It being that I'm studying Java for my Open University course, I'll have a > look at it for you. Python is my preferred language, but I'm not bad with > Java. I think when we get it working on Android 7 & 8 I should use the VMS > to

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Hamish MB
Hi, It being that I'm studying Java for my Open University course, I'll have a look at it for you. Python is my preferred language, but I'm not bad with Java. I think when we get it working on Android 7 & 8 I should use the VMS to test old versions too. People still use Android versions going

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Terry Coles
On Saturday, 24 February 2018 18:02:38 GMT Ralph Corderoy wrote: > I didn't figure out what happens if the HTTP probe `suceeds', assuming > that's what we're seeing in the packets, and HTTPS doesn't. I suspect > that's what's triggering the `You're captive'. Perhaps someone that > knows Java

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Terry Coles
On Saturday, 24 February 2018 18:32:52 GMT Terry Coles wrote: > On Saturday, 24 February 2018 18:02:38 GMT Ralph Corderoy wrote: > > And other Apple domains. I assume both devices have Apple software, > > e.g. iTunes? BTW. I forgot to mention, I added this and other domains that the phone

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Terry Coles
On Saturday, 24 February 2018 18:02:38 GMT Ralph Corderoy wrote: > And other Apple domains. I assume both devices have Apple software, > e.g. iTunes? Not as far as I know. > I've looked at the files with this command that gives packet numbers to > reference. > > tcpdump -vvvKnt# -r

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Terry Coles
On Saturday, 24 February 2018 12:43:28 GMT Ralph Corderoy wrote: > Does the AP have an IP address? Yes. It's 192.168.0.254. > Out of interest, I'd test your Pi set up from a Linux machine with > commands like Here are the results: > dig connectivitycheck.android.com. a ; <<>> DiG

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Ralph Corderoy
Hi Terry, > 1. Turned off DHCP in the TL-WA7210N. > 2. Configured The Raspberry Pi Webserver to also provide DHCP and DNS > servers. > 3. Set up a static IP address of 192.168.0.1 for the Pi. Does the AP have an IP address? > When the system is running, I get allocated an IP Address of >

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Terry Coles
On Saturday, 24 February 2018 08:15:39 GMT Terry Coles wrote: > I then went back to the suggestion made by Ralph a few days ago and captured > the packets on the network when the WiFi connection was made. In the > event, I didn't use tcpdump because I also wanted to see what the exchange > was

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Terry Coles
On Saturday, 24 February 2018 08:15:39 GMT Terry Coles wrote: > HTTP/1.1 204 No Content > Server: nginx/1.6.2 > Date: Thu, 22 Feb 2018 20:05:31 GMT > Connection: keep-alive > > The only difference with the successful connection was the DTG. I just realised that that wasn't quite true. The

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-24 Thread Terry Coles
On Friday, 23 February 2018 17:07:34 GMT Terry Coles wrote: > I've just had another thought as to what I might be doing wrong and have > just written to Foxdog to get clarification of their solution. > > I have put the 'android walled garden hack' code into a file located in > /etc/nginx/sites-

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-23 Thread Terry Coles
On Friday, 23 February 2018 16:39:34 GMT Terry Coles wrote: > Still looking for inspiration I've just had another thought as to what I might be doing wrong and have just written to Foxdog to get clarification of their solution. I have put the 'android walled garden hack' code into a file

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-23 Thread Terry Coles
On Friday, 23 February 2018 12:25:29 GMT Terry Coles wrote: > Any ideas as to what I've missed? I think maybe I've got something wrong in the Foxdog configuration after all. When the system is running, I get allocated an IP Address of 192.168.0.119 for WLN0 on my phone. I can ping WMT.com and

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-23 Thread Terry Coles
On Monday, 19 February 2018 12:04:51 GMT Terry Coles wrote: > I'm hoping to try the new config tomorrow, when I go to the WMT. The config provided by Foxdog Studios didn't work for me, so I removed the Pi and the AP from the WMT and set the whole thing up at home. I'm still having problems, but

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-19 Thread Terry Coles
On Sunday, 18 February 2018 12:19:22 GMT Terry Coles wrote: > At the time I was using the information at: > > https://foxdogstudios.com/making-phones-believe-the-wifi-has-internet > > to do this and had some success. The chap at Foxdog Studios emailed me last night to tell me that he has now

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Patrick Wigmore
This page https://community.spiceworks.com/topic/1870844-wifi-connection-not-used-for-internet leads me to the following stab in the dark: Is your DHCP server configured to provide a gateway IP address to clients, and, if so, would it solve the problem if you configure it NOT to do that? --

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Patrick Wigmore
On Sunday, 18 February 2018, at 14:35:33 GMT, Terry Coles wrote: > I presume not because it looks like I need an SSL/TLS > Certificate. If so, that may be all that is wrong, since > Google have definitely moved towards https in recent years. Except that you shouldn't be able to get an SSL/TLS

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Terry Coles
On Sunday, 18 February 2018 17:34:23 GMT Hamish MB wrote: > Reminds me, I had a load of old android VMS, I could re deploy them and use > a packet sniffer on them too see if that will help. > Good idea? Hamish, It depends if the Android versions are really old. Clearly, the version of

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Hamish MB
Reminds me, I had a load of old android VMS, I could re deploy them and use a packet sniffer on them too see if that will help. Good idea? Hamish On 18 Feb 2018, at 14:51, Terry Coles > wrote: On Sunday, 18 February 2018 14:46:43 GMT

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Terry Coles
On Sunday, 18 February 2018 14:46:43 GMT Ralph Corderoy wrote: > On the Pi, something like > > sudo -i tcpdump -s 3141 -w /tmp/packets > > and Ctrl-C-ing it when you've finished. > > You might need to append a `-i wls34' or whatever the Pi's wifi network > interface is, `ip a' might help.

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Ralph Corderoy
Hi Terry, > > That means the mobile's packets will be reaching that box, another > > Pi? Capture them, both a working mobile and a failing one, e.g. > > tcpdump(1), and examine them, probably with Wireshark on another > > machine. > > The webserver is a Pi3 connected to the WiFi Antenna. On the

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Terry Coles
On Sunday, 18 February 2018 14:16:50 GMT Ralph Corderoy wrote: > Yes, that's why those URLs should take you to that line. It did, when I enabled the domain in ScriptSafe. Doh!! > That's my point. Same area of source code, but the domain names have > moved. This also helps confirm we're on the

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Ralph Corderoy
Hi Terry, > > These first two give a domain name, different in each. I haven't > > checked other older versions. > > > > http://androidxref.com/4.4.4_r1/xref/frameworks/base/core/java/android/net/CaptivePortalTracker.java#64 > >

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Terry Coles
On Sunday, 18 February 2018 13:00:32 GMT Ralph Corderoy wrote: > These first two give a domain name, different in each. I haven't > checked other older versions. > > http://androidxref.com/4.4.4_r1/xref/frameworks/base/core/java/android/net/ > CaptivePortalTracker.java#64 >

Re: [Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Ralph Corderoy
Hi Terry, > As a result, I have a starting point again, but if anyone knows what > the latest test sites are for Android Phones (or has a link to a > list), then I would appreciate it. iPhones seem to be alright. These first two give a domain name, different in each. I haven't checked other

[Dorset] Revisited - Accessing a Local Network over a Wireless Router that is NOT Connected to the Internet

2018-02-18 Thread Terry Coles
Hi, Back in August 2016, I posted a query about how to get a Wireless AP and Webserver to spoof an Internet connection so that a phone could be used to connect to our Audio Guide and Kiddies Quiz. At the time I was using the information at: