[Chilli] Coova-Chilli Redirection Problem

[Xabier Oneca -- xOneca]

2014-02-06 12:11 GMT+01:00 Peter Wagner <peter.wagner at unwired.at>:
> Hello Xabier,
>
> I created a tcpdump on the client but it shows the same behaviour. The device get's the redirect for orf.at 2 times,
> resets both streams in the middle of the chilli redirect response and then accepts the heisse.de redirect without
> a problem.

It's so strange... :S

In packets 28..31 can be seen how CoovaChilli starts to ACK the
request, and then suddenly sends RSTs as if he had just forgotten of
that connection...

> Cheers,
> Peter Wagner
>
>
> Xabier Oneca  --  xOneca <xoneca at gmail.com> wrote:
>
>> Hello Peter,
>>
>> 2014-02-05 Peter Wagner <peter.wagner at unwired.at>:
>> > Hi,
>> >
>> > i successfully installed Coova-Chilli on Openwrt and it works fine.
>> >
>> > Except in a special case:
>> >
>> > 1) A user opens a webpage like "orf.at" on a mobile device. The device is connected to some other
>> > wifi network.
>> >
>> > 2) The user disconnects from the wifi network and connects to my Coova-Chilli wifi network.
>> >
>> > 3) The user trys to reopen the site (orf.at in this case). And has no authenticated session.
>> >    The expected behaviour would be to get redirected to the captive portal page.
>> >
>> > 4) Instead, no redirect is sent at all. (see tcpdump - packet #55)
>>
>> I do see a response from CoovaChilli, but the client resets the connection.
>>
>> I see the first conversation in frames 57-97 (see by yourself in the
>> menu "Analyze → Follow TCP Stream" in Wireshark)
>>
>> Then a retry in frames 84-136 and happens the same.
>>
>> Finally in frames 123-173. And client also resets the connection.
>>
>> > 5) User sees the message "Website not available"
>>
>> Yes. It should redirect to the captive portal, but for some reason the
>> client is resetting the connection...
>>
>> Maybe you could run tcpdump in a client?
>>
>> > 6) The user requests the site heisse.de (!= orf.at in this case) (see tcpdump package #402)
>> >
>> > 7) The redirect is sent and the user is redirected to the captive partal page.
>>
>> Yes. That's seen in frames 404-468 and captive portal loading in 473-609.
>>
>> > What could be the cause of this problem? I'm using the latest version of Coova-Chilli and use this cmdline options:
>> >
>> > /usr/sbin/chilli  -c /etc/chilli.conf --fg --dhcpnotidle
>> > --radiusoriginalurl --lease 300 --pidfile=/var/run/chilli.pid
>> > --definteriminterval 60 --usestatusfile /tmp/chilli.status
>> > --seskeepalive --proxyonacct --uamgardendata --uamotherdata
>> > --locationimmediateupdate --nousergardendata --patricia
>> > --proxylocattr=32 --redirssl --redirurl

Try running with --debug option to see what does CoovaChilli see and
do. Also, what is the content of `/etc/chilli.conf`?

Cheers,

Xabier Oneca_,,_