NoCatAuth - discussion of the NoCatAuth shared gateway authentication mechanism

headers ds10025 | 1 Jun 2005 14:13

Morning

I would like to thank eveyone for they help.

I now got Nocat/Gateway online and working amd Auth against NT server.

Thanks

Dan

Dear list,

The following questions addresses for NoCat installed under FBSD

Our installation goes into the same box for different functions (auth and 
gateway).

Within gateway function under, we found bin/initialize.fw file that supposed 
to be called for every startup.

Let say an interface IP is 192.169.1.131 and DHCP range is 192.168.1.194-254.

The following lines are the snipped of bin/initialize.fw file
# Others
${IPFW} add 60100 queue 3 all from any to any in                 // line A
${IPFW} add 60100 queue 4 all from any to any out                // line B
${IPFW} add 60110 skipto 61000 all from any to any               // line C
${IPFW} queue 3 config mask src-ip 0xffffffff pipe 3 weight 75   // line D
${IPFW} queue 4 config mask dst-ip 0xffffffff pipe 4 weight 100  // line E
${IPFW} pipe 3 config bw 128Kbit/s                               // line F
${IPFW} pipe 4 config bw 512Kbit/s                               // line G

Questions :
+ why line A and line B using the same command number with different pipe and 
different functions ? Seems both command working half duplex. Is it right ?
+ what line C for ?
+ what line D and E means and for ?
+ line F and G seems for bandwidth limiting. But how this command work ? For 
line G, is it 512K from interface card sharing for the whole DHCP addresses 
or 512K from interface card to each hosts within DHCP addresses ?

Dear list,

The following questions addresses for NoCat installed under FBSD

Our installation goes into the same box for different functions (auth and 
gateway).

Within gateway function under, we found bin/initialize.fw file that supposed 
to be called for every startup.

Let say an interface IP is 192.169.1.131 and DHCP range is 192.168.1.194-254.

The following lines are the snipped of bin/initialize.fw file
# Others
${IPFW} add 60100 queue 3 all from any to any in                 // line A
${IPFW} add 60100 queue 4 all from any to any out                // line B
${IPFW} add 60110 skipto 61000 all from any to any               // line C
${IPFW} queue 3 config mask src-ip 0xffffffff pipe 3 weight 75   // line D
${IPFW} queue 4 config mask dst-ip 0xffffffff pipe 4 weight 100  // line E
${IPFW} pipe 3 config bw 128Kbit/s                               // line F
${IPFW} pipe 4 config bw 512Kbit/s                               // line G

Questions :
+ why line A and line B using the same command number with different pipe and 
different functions ? Seems both command working half duplex. Is it right ?
+ what line C for ?
+ what line D and E means and for ?
+ line F and G seems for bandwidth limiting. But how this command work ? For 
line G, is it 512K from interface card sharing for the whole DHCP addresses 
or 512K from interface card to each hosts within DHCP addresses ?

Hi All!

Does anyone have a web based frontend for user administration on a radius 
server?

I'm looking for something that will allow the user to administrate 
themselves, provide status of the gateways and users, and support AAA and 
billing.  I'm not looking for a commercial product as I won't be charging, 
but I do want all the features and protection of a billing based system. ( 
upload / download qoutas, bandwidth limits, time based access control, etc )

Any help would be fantastic!

Thanks!
Kevin

Hi!

In preperation of a WLAN Rollout in our little company (15 people) I'd 
like to know if what I think is possible, is actually doable.
Here's a little network diagram in ascii:

Internet
     \_
       \ xDSL Router           +-----+       ____Company LAN_______
                    \___ eth1  | FW  |      /                      \
                               | Red | __ eth0     192.168.0.*      |
       192.168.119.* ___ eth3  | Hat |      \___+_______________+__/
                    /          +-----+          |               |
    WLAN AP (Linksys/Netgear)                Fileservers       PC's/MAC's
     (((( /\ ))))
   Mostly WinXP Notebooks

Firewall runs: Red Hat Linux
               + custom IPTables script
               + transparent squid
               + openswan ipsec

So far so good. My questions:

1) Can NoCatAuth work without a HostAP Wlan Card in the Server 
(according to the ZoneCD Package this should be doable)
2) Can ipsec which works for roaming users (teleworking) also be done 
without specifically logging in thru NoCat from the WLAN (Treat ipsec 
wlan just as we would from the Internet)

Hi All

I have a SME sever from http://www.contribs.org

And I would like to extend it to allow my neighbor's to connect out using my 
connection but keep them outside of by network

Also if possible I would to connect to all the wireless router's in the area 
so we all gain the extra band width extra? 

Is this possible?

SME is base on red hat and the new version is base CentOS 3.5

Many Thanks 

Paul Bearne

Can anybody help me with this problem?

I am trying to set up NoCatAuth on our network as a captive portal.

We are already using proxy authentication on Squid with a filter like 
"(&(uid=%s)(ou=web)(webstatus=TRUE))".

NoCatAuth works in a passive mode with
   " LDAP_filter         uid"
but does not work with
    "LDAP_filter        (uid=%u)(ou=web)(webstatus=TRUE)

How can I get NoCatAuth to accept the LDAP_filter 
(uid=%u)(ou=web)(webstatus=TRUE) which is neccessary for authentication 
on our network?

--

-- 
Wole Adebiyi

Dear All,

            I am trying to build a wireless gateway on an Linux embedded
operating system and I found that NoCatSplash is very much useful to my
work, but unfortunately it supports open mode and the Passive or Captive
modes have not been released so far. I cannot use NoCatAuth because it is
written with Perl programming language and for the number of bugs that it
contains as well. So I wonder if you know where the NoCatSplash with Passive
and Captive modes will be released and is there any Beta version for this
release and do you know some other alternatives that can be used??

I tried with chillispot, but the problem is that it based on TUN point to
point logical port and not on the eth physical port like NoCat.

Your help is highly appreciated and thanks in advance

Bassam A. Al-Khaffaf

Hey,
there's a new hotspot project on sourceforge that provides a firmware
for the Linksys WRT54G based on ewrt. They use a modified version of
NoCat that supports radius authentication. Quoting from the
feature-list:

- an improved captive portal splashd
  -- handling dynamic firewall restore
  ---radius auth and acct support,
  ---login, confirm, and logout page from external server,
  ---automatic logout,
  ---traffic reporting,
  ---improved handling of firewall rules in case firewall rules are 
reinitialized,
  ---automatic self test of splashd functionality with timeout,
  ---support of syslogd
  ---httpd request read loop improved, ignoring wrong requests,

http://sourceforge.net/projects/hotspot-zone/

-Markus

--
Gravity: It's not just a good idea. It's the law.
       http://cervisia.org

* On 24-Jun-2005 at 12:21PM PDT, Markus Breitenbach said:
> there's a new hotspot project on sourceforge that provides a firmware
> for the Linksys WRT54G based on ewrt. They use a modified version of
> NoCat that supports radius authentication. Quoting from the
> feature-list...

Heh, nice of them to let us know before they forked our project! Is it
worth plundering their code base?

SDE

Mon	Tue	Wed	Thu	Fri	Sat	Sun

		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30

1	October 2009
3	July 2009
7	May 2009
5	April 2009
2	March 2009
17	February 2009
2	January 2009
2	December 2008
11	November 2008
18	October 2008
6	February 2008
3	November 2007
4	October 2007
10	September 2007
24	August 2007
5	July 2007
23	June 2007
6	May 2007
17	April 2007
4	February 2007
1	January 2007
4	December 2006
5	November 2006
10	October 2006
6	September 2006
2	August 2006
27	July 2006
16	June 2006
17	May 2006
18	April 2006
9	March 2006
9	February 2006
12	January 2006
17	December 2005
27	November 2005
44	October 2005
48	September 2005
31	August 2005
14	July 2005
17	June 2005
65	May 2005
41	April 2005
20	March 2005
26	February 2005
75	January 2005
29	December 2004
70	November 2004
67	October 2004
78	September 2004
66	August 2004
37	July 2004
73	June 2004
125	May 2004
106	April 2004
323	March 2004
225	February 2004
1	January 2004
2	July 2003
1	June 2003

Thanks

Question about IPFW (NoCat under FBSD)

Question about IPFW (NoCat under FBSD)

Web based Radius administration

Newbie: NoCat doable in this setup?

Re: Welcome to the "NoCat" mailing list

LDAP_filter problem on NoCatAuth

When NoCatSplash with Passive and Captive modes will be released???

Re: When NoCatSplash with Passive and Captive modes willb be released??

Re: Re: When NoCatSplash with Passive and Captive modes willb be released??