Home › Forums › Open-Source Software › CoovaAP Firmware

Firewall Whitelist on CoovaAP

Tue, 04/14/2009 - 18:23 — laures

Hello coovaAP community,

how do you guys create a port based white lists for offering particular services for hotspot users? This did not work fore me because signing in doesnt work anymore:

accept:dport=22,80,25,110,143,993,995,5190
drop

‹ Setting up Linksys WRT54GL+CoovaAP+FreeRADIUS as a hotspot Configuration of iptables with own radius - problems ›
Wed, 04/15/2009 - 09:52 — laures

Re: Firewall Whitelist on CoovaAP

No, i dont block them on the d-link. I think i have to "sniff" the problem with wireshark. But thank you for your help!

Tue, 04/14/2009 - 21:27 — Beone

Re: Firewall Whitelist on CoovaAP

laures wrote:

Hello coovaAP community,

how do you guys create a port based white lists for offering particular services for hotspot users? This did not work fore me because signing in doesnt work anymore:

accept:dport=22,80,25,110,143,993,995,5190
drop

Another question:
Have a look at my Network in the attached file. Everything is working very well, but CovaAAA doesnt run. But it runs when the CoovaAP Router ist the Internet Gateway. Does it have problems with NAT? Or what special FW/NAT rule has to be configured?

I don't use coovaAAA but according radius logic you should alow traffic on destination ports 1812 (authentication) and 1813 (accounting) coming from coovaAP. Do you block those ports outbound on the d-link?

Kind regards
B