Wireless Login Page

I have a wireless card installed on Fedora 4 system. I have
the wireless
connection open, DHCP enabled and have disabled forwarding
for the
"open" network. I use Poptop and Radius to
authenticate and assign IP
addresses on the tunnel and then allow forwarding for the
tunnel address
range. I now want to have all http requests from the
"open" network to
be directed to a opening/login page on the wireless server.
Can this be
done with iptables (conntrack?)? Would anyone suggest links
or keywords
for finding more information? Thank you.

Kirk

You don't need contrack for the redirection part. I've
achived the same 
thing on my router using -j REDIRECT

You could do it for only port 80 trafic, but I've done it
for all traffic. 
You get some entertaining attempts from people trying to
work out why they 
have a valid DHCP lease but now internet conductivity.

----- Original Message ----- 
From: "Kirk Wallace" <kwallacewallacecompany.com>
To: <netfilterlists.netfilter.org>
Sent: Thursday, April 26, 2007 5:48 PM
Subject: Wireless Login Page


>I have a wireless card installed on Fedora 4 system. I
have the wireless
> connection open, DHCP enabled and have disabled
forwarding for the
> "open" network. I use Poptop and Radius to
authenticate and assign IP
> addresses on the tunnel and then allow forwarding for
the tunnel address
> range. I now want to have all http requests from the
"open" network to
> be directed to a opening/login page on the wireless
server. Can this be
> done with iptables (conntrack?)? Would anyone suggest
links or keywords
> for finding more information? Thank you.
>
> Kirk
>
>
> 

On Apr 27 2007 12:41, Alex wrote:
>
> You don't need contrack for the redirection part. I've
achived the same thing
> on my router using -j REDIRECT

REDIRECT does use connection tracking (by means of a NAT
mapping).


Jan
-- 

TBH this site can explain -j REDIRECT better than I could.
http://security.maruhn.com/iptables-tutorial/x10065.html


Is the machine thats doing the NATing the same as the one
with the httpd? 
This has to be the case for redirect to work as you require
it. Other wise, 
maybe you could use squid to proxy?

----- Original Message ----- 
From: "Kirk Wallace" <kwallacewallacecompany.com>
To: <netfilterlists.netfilter.org>
Sent: Thursday, April 26, 2007 5:48 PM
Subject: Wireless Login Page


>I have a wireless card installed on Fedora 4 system. I
have the wireless
> connection open, DHCP enabled and have disabled
forwarding for the
> "open" network. I use Poptop and Radius to
authenticate and assign IP
> addresses on the tunnel and then allow forwarding for
the tunnel address
> range. I now want to have all http requests from the
"open" network to
> be directed to a opening/login page on the wireless
server. Can this be
> done with iptables (conntrack?)? Would anyone suggest
links or keywords
> for finding more information? Thank you.
>
> Kirk
>
>
>