Changes between Version 11 and Version 12 of FAQ

Timestamp:

02/22/06 10:59:57 (7 years ago)

Author:

max-horvath

Comment:

Added information about correct firewalling

FAQ

@@ -59 +59 @@
   A: Help is available through several real-time and non-realtime means listed at [wiki:"Contact / Support"]
  
-  If you need technical help with your WiFiDog installation, your message should include :
+  If you need technical help with your !WiFiDog installation, your message should include :
    * Your Wifidog client version (ipk or your own compiled version)
    * Configuration setup (wifidog.conf, please remove default config)
    * Wifidog debug output messages (command : wifidog -f -d 7). 
 
-= Client FAQ =
+= Gateway FAQ =
 
-Questions about the Wifidog client
+Questions about the Wifidog gateway
 
-== Q: What are the requirements to run the Client ? ==
+== Q: What are the requirements to run the gateway ? ==
   A: The gateway requires the following:
     1. The [http://www.linux.org/ linux operating system]
@@ -87 +87 @@
 
   A: Make sure that the ipt_mac.o kernel module is loaded. This is an optional part of the iptables packages and it is not always enabled by default. On most Linux distributions, kernel modules are configured in "/etc/modules.conf" or "/etc/modules".
+
+== Q: Is it possible to block all outgoing TCP/UDP ports until a user has authenticated via WiFiDog's login page ? ==
+
+  A: If you set up your OpenWrt-powered router with a bridged network interface (default), the current firewall rules of !OpenWrt do not permit to block all outgoing TCP/UDP ports except port 80 until a user has authenticated via WiFiDog's login page.
+
+  You are going to have to disable forwarding from the bridge interface to the wan interface:
+  {{{
+# The following lines have been commented out for WiFiDog to work
+# iptables -A FORWARD -i br0 -o br0 -j ACCEPT
+# iptables -A FORWARD -i $LAN -o $WAN -j ACCEPT
+}}}
 
 = Auth-Server FAQ =