[MLB-WIRELESS] MW Intranet DNS & Redirection

[Ben Anderson]

iptables -t nat -A PREROUTING -s a.b.c.d/24 -p TCP --dport 80 -j REDIRECT 80

Where a.b.c.d/24 represents your subnet you want redirected...

Ben.

> Easy?
>
> > >filter port 80 request for a particular subnet
> >
> >
> >
> > ----------
> > From: Ben Anderson
> > Sent: Friday, 28 November 2003 11:34
> > To: Richard Van Orsouw; Melbourne Wirless
> > Subject: Re: [MLB-WIRELESS] MW Intranet DNS & Redirection
> >
> >
> > The iptables rule is easy:
> > iptables -t nat -A PREROUTING -p TCP --dport 80 -j REDIRECT 80
> >
> > Don't forget to use something like mod_rewrite to convince apache to
> > respond
> > to every http request with it's own page!
> >
> > Regards,
> > Ben.
> >
> >
> > > Excuse the late reply,
> > > I'm running a similar setup to Dan ie AP, Omni, DHCP server.
> > > But I am also having similar problems, whereby I get my DHCP server
> > issuing
> > > IP address's to hosts who never visit the router address in their web
> > > browser (using webalizer stats). What we need is
ipchains/iptables/ipfw
> > to
> > > filter port 80 request for a particular subnet to automatically take
it
> > to
> > a
> > > "Welcome to Melbourne Wireless, blah blah blah" site which details on
> > how
> > to
> > > connect permanently. Once this node is permanently connected, that IP
> > > address can be taken off the filter. I think that people are
connecting
> > to
> > > my node thinking that they can get free internet, but I would like to
> > > "educate" them by visiting this website. Could some help me out on the
> > > iptables/ipchains rules?
> > >
> > > L8r.
> > >
> > > > ----------
> > > > From: Dan Flett
> > > > Sent: Thursday, 20 November 2003 15:05
> > > > To: Melbourne Wirless
> > > > Subject: [MLB-WIRELESS] MW Intranet DNS & Redirection
> > > >
> > > > Hi all,
> > > >
> > > > From looking through the Wiki it looks like DNS for the MW network
has
> > > > been discussed at length in the past, but I'm wondering has there
been
> > any
> > > > recent discussion or developments?  I am Node GMR and personally, I
> > can
> > > > navigate quite well just typing 10.10.x.x numbers into my browser.
> > I'm
> > > > just concerned that not being able to type in human-readable names
> > into
> > a
> > > > browser will make using the network less user-friendly for the
> > less-geeky
> > > > punters.
> > > >
> > > > On a related topic, I run an access point at my node with DHCP.
From
> > > > looking at the leases log I see that I get the occasional visitor
> > > > assocating with my AP.  I'm pretty sure that these visitors are
either
> > my
> > > > neighbors' home computers associating by accident, or wardrivers
> > looking
> > > > for Internet and home networks to probe.  I'm thinking that once
they
> > > > associate, they probably think they have Internet access.  So when
> > they're
> > > > connected they're going to type something like " www.google.com"
into
> > > > their browsers.  And they're going to get a 404 error.
> > > >
> > > > Is there some way to redirect these requests to my local web page at
> > > > 10.10.145.45 or any other web page of my choosing?  All these chance
> > > > associations that people are having with my AP are a great chance to
> > > > spread the word about Melbourne Wireless and the network.  But I
don't
> > > > think any of them are going to go to the trouble of looking at the
> > default
> > > > gateway that my DHCP gives them and then typing that address into
> > their
> > > > browser.  Instead of a 404 I want them to see a web page that
explains
> > why
> > > > they're not seeing Google and tells them what the Melbourne Wireless
> > > > Intranet is.
> > > >
> > > > Cheers,
> > > >
> > > > Dan
> > > >
> > >
> > > To unsubscribe: send mail to majordomo at wireless.org.au
> > > with "unsubscribe melbwireless" in the body of the message
> > >
> > >
> >
> >
> >
>
> To unsubscribe: send mail to majordomo at wireless.org.au
> with "unsubscribe melbwireless" in the body of the message
>
>



To unsubscribe: send mail to majordomo at wireless.org.au
with "unsubscribe melbwireless" in the body of the message