Can NOT configure my device as a captive portal AP

Hi,

I try to use coova-chilli to setup a captive portal AP,

192.168.1.254
Internet====[Gateway, DHCP server]======eth0[My Device] ath0...... [Wireless Clients]
192.168.1.xxx

1. Configure ath0 as ap mode, no encryption is configured.
2. create bridge interface 'brguest', join eth0 and ath0.
3. ifconfig brguest 192.168.1.33 netmask 255.255.255.0, default route to 192.168.1.254

a. When coova-chilli is not running, [Wireless Clients] can get IP from [Gateway], and can surf the Internet.

b. my /ect/chilli/config is : (skip default settings)

HS_WANIF=eth0
HS_LANIF=brguest
HS_NETWORK=192.168.1.0
HS_NETMASK=255.255.255.0
HS_UAMLISTEN=192.168.1.33
HS_DHCPGATEWAY=192.168.1.254
HS_DYNIP=192.168.1.0
HS_DYNIP_MASK=255.255.255.0
HS_STATIP=192.168.1.0
HS_STATIP_MASK=255.255.255.0
HS_DNS1=192.168.1.254
...
HS_RADIUS=127.0.0.1
HS_RADIUS2=127.0.0.1
...

c. Start coova-chilli,

% chilli -d --nodynip &

As result, [Wireless client] can get IP address, but ALSO CAN surf the Interface without being captured by [My Device] !!

I think my application is just a common hotspot usage, but I don't know why it doesn't work. Being searching the forums, google in the past weeks, I still can not find the solution.

Does someone have 'workable' /etc/chilli/config for me, or any advice ?

Thank you !
Aries Wang aries.pop3@gmail.com