2017-12-29 - Re: [GRASE-Hotspot] IPTABLES Help

Header Data

From: Timothy White <ti***8@gmail.com>
Message Hash: b8e1fa715b5a30b63dcc67538c5217149f633808e860eb0293fd5ca2d0ca4ca5
Message ID: <CAESLx0+29TG0pwGBLJkwaQXdKkF4v+_8jkkF1ogARJKW80Jzzg@mail.gmail.com>
Reply To: <CAFb3bYCwcpBpqqoQucOnHF4_zp1nbbzj6zi__kj=KkgBmBsjLw@mail.gmail.com>
UTC Datetime: 2017-12-29 00:33:12 UTC
Raw Date: Fri, 29 Dec 2017 17:33:12 +1000

Raw message 

Hi Sergen

As long as the Windows XP computer is authenticated to the hotspot, it
should be able to talk to the Windows 7 computer. At no point will the
Windows 7 computer be able to "talk back" (initiate connections), but
it will be able to respond to the Windows XP computer.

Those rules you've shown, I don't fully understand them, but it looks
like you're forwarding all connections, which makes the hotspot
useless (nothing is going through the hotspot properly). You may want
to revert to the original settings, and ensure that you are fully
authenticated to the hotspot (logged in), and try again.

Regards

Tim

On Fri, Dec 29, 2017 at 4:28 PM, Sergen Çolak <se***7@gmail.com> wrote:
> Hi Tim,
> I will try to explain what I want to do. In the meantime, I use translate in
> my writing forgive the errors :)
> I have a Debian-installed computer and a hotspot is running on it.
> Eth0 - 192.168.1.101
> Eth1- 10.1.0.1
> I have one XP computer and I have IP over Hotspot. 10.1.0.2
> I also have another Windows 7 computer and this computer is not connected to
> the hotspot. IP address 192.168.1.238
>
> What I want to do now is to send files from the XP computer connected to the
> Hotspot to the Windows 7 Computer which is not connected to the Hotspot.
> However, Iptables Forward rules prevent this.
> I have produced a solution myself and maybe it will benefit. It's running. I
> added it to Coovachilli up.sh file.
> ipt -I FORWARD -s $ ADDR / 20 -j ACCEPT
> ipt -I FORWARD -s $ ADDR / 20 -i $ TUNTAP -p tcp --dport 80 -j DROP
> ipt -I FORWARD -s $ ADDR / 20 -i eth1 -p tcp --dport 80 -j DROP
> Thank you for the answer.
>
> 2017-12-29 0:01 GMT+03:00 Timothy White <ti***8@gmail.com>:
>>
>> Hi Sergen
>>
>> I'm not sure we really understand what you are trying to do. Can you
>> please draw a diagram of your setup, and explain what you are trying
>> to achieve?
>>
>> The best I can understand, is that you want a computer on the hotspot
>> network to talk to a computer on the "internal" network? Is your
>> internal network the same network as the hotspots WAN?
>> From one of your images, it looks like you can ping and browse that
>> internal computer, so what is the problem?
>>
>> Regards
>>
>> Tim
>>
>> On Fri, Dec 22, 2017 at 5:07 PM, Sergen Çolak <se***7@gmail.com>
>> wrote:
>> > Hello to everyone,
>> > I am using a grase hotspot on Debian. I have a user computer that takes
>> > hotspot ip. I have an internal network computer in one bag. However, I
>> > can
>> > not transfer files from my Hotspot ip computer to the internal network.
>> > I
>> > share the ifconfig output and my computer's threads and I am waiting for
>> > your help.
>> >
>> > --
>> > This mailing list is for the Grase Hotspot Project
>> > http://grasehotspot.org
>> > ---
>> > You received this message because you are subscribed to the Google
>> > Groups
>> > "Grase Hotspot" group.
>> > To unsubscribe from this group and stop receiving emails from it, send
>> > an
>> > email to gr***e@grasehotspot.org.
>> > To post to this group, send email to gr***t@grasehotspot.org.
>> > Visit this group at
>> > https://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> > To view this discussion on the web visit
>> >
>> > https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/398f5457-abab-4123-99b6-8fb49d69b4dd%40grasehotspot.org.
>>
>> --
>> This mailing list is for the Grase Hotspot Project http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> https://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAESLx0%2Bwh-Xpc5iOV5yBrGaqRU2b2iT1gnbQX9v%2BW6MEs_1%2Bqg%40mail.gmail.com.
>
>
> --
> This mailing list is for the Grase Hotspot Project http://grasehotspot.org
> ---
> You received this message because you are subscribed to the Google Groups
> "Grase Hotspot" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to gr***e@grasehotspot.org.
> To post to this group, send email to gr***t@grasehotspot.org.
> Visit this group at
> https://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
> To view this discussion on the web visit
> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAFb3bYCwcpBpqqoQucOnHF4_zp1nbbzj6zi__kj%3DKkgBmBsjLw%40mail.gmail.com.

Thread