2019-09-07 - Re: Non HTTPS sites are not working

Header Data

From: SK NZ <sa***m@gmail.com>
Message Hash: 32c85eb76b7583db62cdddd18366664ea7c407ccae293fb29a88dc1715b58a54
Message ID: <7860aa8b-2abf-44b1-9bde-62cbeb1d6f67@grasehotspot.org>
Reply To: <cf5772b0-a7fc-43ea-96a2-0ac4ac986c49@grasehotspot.org>
UTC Datetime: 2019-09-07 04:17:23 UTC
Raw Date: Sat, 07 Sep 2019 04:17:23 -0700

Raw message 

Hello,
I haven't made any changes to iptable. Please check below.

sk@debian:~$ sudo iptables -S
> -P INPUT ACCEPT
> -P FORWARD ACCEPT
> -P OUTPUT ACCEPT
> -A INPUT -i eth1 -j DROP
> -A INPUT -d 10.1.0.1/32 -i tun0 -p icmp -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p udp -m udp --dport 53 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p udp -m udp --dport 67:68 -j ACCEPT
> -A INPUT -d 255.255.255.255/32 -i tun0 -p udp -m udp --dport 67:68 -j 
> ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 3128 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 3990 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 53 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 2812 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 22 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 443 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 80 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 4990 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -p tcp -m tcp --dport 3990 -j ACCEPT
> -A INPUT -d 10.1.0.1/32 -i tun0 -j DROP
> -A FORWARD -i tun0 -o eth0 -j ACCEPT
> -A FORWARD -i tun0 ! -o eth0 -j DROP
> -A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS 
> --clamp-mss-to-pmtu
> -A FORWARD -o tun0 -j ACCEPT
> -A FORWARD -i tun0 -j ACCEPT
> -A FORWARD -o eth1 -j DROP
> -A FORWARD -i eth1 -j DROP




On Saturday, September 7, 2019 at 4:43:48 PM UTC+6, christopher wrote:
>
> Hello,
>
> Have you made sure that the iptable rules that get installed with grase 
> have port 80 open?
>
> On an out of the box install, not making any changes to the iptable rules, 
> I found that the hotspot just worked.
>
> Regards,
>
> Christopher.
>
> On Saturday, 7 September 2019 22:21:38 UTC+12, SK NZ wrote:
>>
>> In a freshly installed Grase Hotspot server, I can connect to an AP. I 
>> can browse *https sites*... But *non-https sites* are not loading at 
>> all. I tried from different devices and different browsers. Any 
>> suggestions? 
>>
>> Support data : https://paste.grasehotspot.org/view/e56ddd33
>>
>

Thread