VPN Traffic issues
wlanmac
wlan at mac.com
Tue Mar 10 05:35:50 UTC 2009
Try putting the line "uamlogoutip 127.0.0.1" in
your /etc/chilli/local.conf
David
On Tue, 2009-03-10 at 12:38 +1100, Daniel Garcia wrote:
> I added HS_UAMLOGOUTIP=127.0.0.1 to my config file but when I restart coova it is not in the generated main.conf file.
>
> Can you please specify exactly where and how you configured this?
>
> Thanks
>
> Daniel Garcia
> IT Assistant Manager
> Core Infrastructure & Systems Development
> Global Gossip Group
> [a] 14 Wentworth Avenue, Sydney, NSW 2010
> [t] +612 9263 0458
> [f] +612 9263 0404
> [m] 0400 604 897
> [e] dgarcia at globalgossip.net
>
> -----Original Message-----
> From: wlanmac [mailto:wlan at mac.com]
> Sent: Monday, 9 March 2009 7:02 PM
> To: chilli at coova.org
> Subject: Re: VPN Traffic issues
>
> Thanks for the suggestion!
>
> David
>
>
> On Mon, 2009-03-09 at 08:52 +0100, Oliver Hinckel wrote:
> > Daniel Garcia wrote on 03/09/2009 01:10 AM:
> > [...]
> > >> You might want to do a wireshark dump (or tcpdump) of the subscriber's
> > >> traffic. Or, run chilli in debug mode to help see what it is doing. The
> > >> first question is: can the subscriber surf the walled garden or does
> > >> *nothing* work?
> > > surf the walled garden? Sorry you lost me. Browsing the internet is fine
> > > when subscribers log in correctly. Once logged in and successfully
> > > browsing, if they VPN, then browsing stops working. I notice that DNS
> > > is working because I see the browser resolving the name URL...it appears
> > > to be something in the iptables is preventing it
> >
> > We had same problems with surfen when VPN was activated. The problem
> > was, that the VPN software (doesn't remember which VPN software and type
> > of VPN was used) tries to contact IP address 1.1.1.1 which is the
> > default value for the "uamlogoutip" settings:
> >
> > http://coova.org/wiki/index.php/CoovaChilli/chilli.conf(5)
> >
> > So if the customer starts his VPN the software contacted the IP address
> > 1.1.1.1 (or tries at least to contact) and chilli logged them out. The
> > customer wasn't able to surf the web anymore.
> >
> > To solve this problem, we changed the "uamlogoutip" value to 127.0.0.1
> > since we don't need this configuration with logging out by contacting a
> > specific IP address.
> >
> > HTH
> >
> > - Olli
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: chilli-unsubscribe at coova.org
> > For additional commands, e-mail: chilli-help at coova.org
> > Wiki: http://coova.org/wiki/index.php/CoovaChilli
> > Forum: http://coova.org/phpBB3/viewforum.php?f=4
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: chilli-unsubscribe at coova.org
> For additional commands, e-mail: chilli-help at coova.org
> Wiki: http://coova.org/wiki/index.php/CoovaChilli
> Forum: http://coova.org/phpBB3/viewforum.php?f=4
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: chilli-unsubscribe at coova.org
> For additional commands, e-mail: chilli-help at coova.org
> Wiki: http://coova.org/wiki/index.php/CoovaChilli
> Forum: http://coova.org/phpBB3/viewforum.php?f=4
>
More information about the Chilli
mailing list