Isolating Hotspot From Lan Only Temporary

  • Anonymous August 29, 2013 at 9:34 pm

    As a first-time user of both DD-WRT and this hotspot I’m having trouble configuring firewall rules that work to isolate the hotspot from the LAN or guest zone.

    When I enable the hotspot, two ACCEPT rules for tun0 to/from any are entered at the top of the FORWARD iptable. I can then insert rules above that to DROP any connection attempts to/from tun0 and br0 (LAN) or br1 (guest). This all works fine for a short time or until I reboot in which case the two ACCEPT rules are once again at the top.

    If I save the config with the correct rules and reload, it is fine but within seconds these two ACCEPT rules once again force themselves to the top. As long as they’re there I have no security.

    How can I have the ACCEPT rules respect the order that I put them in, below the DROP rules for the other bridges?

    As a secondary problem, once I turn on the hotspot it can take 60-90 seconds for the DHCP service to provide addresses when it normally takes a second or two.

    Config: D-Link DIR-825 running DD-WRT v24-sp2 (03/25/13) std

    Dimitrios August 30, 2013 at 3:39 pm

    Unfortunately, we are not the developers of the dd-wrt firmware and we don’t know how the firewall rules were programmed on that firmware. In order to get support for the firmware we advise you to post a question on the forum of the dd-wrt site (http://www.dd-wrt.com/site/community). A developer of this firmware may give you the necessary explanations you require. Another solution would be to connect your hotspot router to another router and set the firewall rules on the secondary router, this is just an advise though.

    Anonymous August 30, 2013 at 4:10 pm

    Are you saying that the hotspotsystem.com support is NOT provided by you but programmed by someone on the DD-WRT team?

    Dimitrios August 30, 2013 at 4:30 pm

    We offer a Cloud-based Hotspot Solution. We operate web, database and radius servers, you just have to operate the router. You are able to use our system if you manage to install properly the firmware on your router. In many routers the default native firmware does not support the functions our system has to offer, so you must run a third party firmware such as DD-WRT in order for your router to support our system.

    Your question is related to the firewall rules of the dd-wrt firmware, which is not related to us. We can only offer advice in such cases. We advised you to connect your hotspot router to another router and set the firewall rules on the secondary router, this may solve your issue.

0 0

You must be logged in to reply to this topic.