captive portal does not popup when this iptable rule is applied [closed]

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












iptables -F
iptables -t mangle -N internet
iptables -t mangle -A PREROUTING -j internet
iptables -t mangle -A internet -j MARK --set-mark 99


the iptables entry below blocks all traffic but captive portal does not popup



iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


if ommitted captive portal does popup but some online games like mobile legends are able to pass. im guessing that if i add that -p all im also blocking the ckecking of the portal. I just dont know what it is.



iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 443 -j DNAT --to-destination 10.10.10.1:443
iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 80 -j DNAT --to-destination 10.10.10.1:80

iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE









share|improve this question















closed as too broad by Rui F Ribeiro, RalfFriedl, G-Man, Christopher, msp9011 Dec 6 at 7:32


Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.














  • The captive portal activation is activated upon tests for the absence of a direct Internet connection. If you create a route for that it wont happen.
    – Rui F Ribeiro
    Dec 3 at 12:39















up vote
0
down vote

favorite












iptables -F
iptables -t mangle -N internet
iptables -t mangle -A PREROUTING -j internet
iptables -t mangle -A internet -j MARK --set-mark 99


the iptables entry below blocks all traffic but captive portal does not popup



iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


if ommitted captive portal does popup but some online games like mobile legends are able to pass. im guessing that if i add that -p all im also blocking the ckecking of the portal. I just dont know what it is.



iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 443 -j DNAT --to-destination 10.10.10.1:443
iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 80 -j DNAT --to-destination 10.10.10.1:80

iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE









share|improve this question















closed as too broad by Rui F Ribeiro, RalfFriedl, G-Man, Christopher, msp9011 Dec 6 at 7:32


Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.














  • The captive portal activation is activated upon tests for the absence of a direct Internet connection. If you create a route for that it wont happen.
    – Rui F Ribeiro
    Dec 3 at 12:39













up vote
0
down vote

favorite









up vote
0
down vote

favorite











iptables -F
iptables -t mangle -N internet
iptables -t mangle -A PREROUTING -j internet
iptables -t mangle -A internet -j MARK --set-mark 99


the iptables entry below blocks all traffic but captive portal does not popup



iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


if ommitted captive portal does popup but some online games like mobile legends are able to pass. im guessing that if i add that -p all im also blocking the ckecking of the portal. I just dont know what it is.



iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 443 -j DNAT --to-destination 10.10.10.1:443
iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 80 -j DNAT --to-destination 10.10.10.1:80

iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE









share|improve this question















iptables -F
iptables -t mangle -N internet
iptables -t mangle -A PREROUTING -j internet
iptables -t mangle -A internet -j MARK --set-mark 99


the iptables entry below blocks all traffic but captive portal does not popup



iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


if ommitted captive portal does popup but some online games like mobile legends are able to pass. im guessing that if i add that -p all im also blocking the ckecking of the portal. I just dont know what it is.



iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 443 -j DNAT --to-destination 10.10.10.1:443
iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 80 -j DNAT --to-destination 10.10.10.1:80

iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE






iptables raspberry-pi captive-portal






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Dec 3 at 12:27









Rui F Ribeiro

38.5k1479128




38.5k1479128










asked Dec 3 at 12:23









user323996

1




1




closed as too broad by Rui F Ribeiro, RalfFriedl, G-Man, Christopher, msp9011 Dec 6 at 7:32


Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.






closed as too broad by Rui F Ribeiro, RalfFriedl, G-Man, Christopher, msp9011 Dec 6 at 7:32


Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.













  • The captive portal activation is activated upon tests for the absence of a direct Internet connection. If you create a route for that it wont happen.
    – Rui F Ribeiro
    Dec 3 at 12:39

















  • The captive portal activation is activated upon tests for the absence of a direct Internet connection. If you create a route for that it wont happen.
    – Rui F Ribeiro
    Dec 3 at 12:39
















The captive portal activation is activated upon tests for the absence of a direct Internet connection. If you create a route for that it wont happen.
– Rui F Ribeiro
Dec 3 at 12:39





The captive portal activation is activated upon tests for the absence of a direct Internet connection. If you create a route for that it wont happen.
– Rui F Ribeiro
Dec 3 at 12:39











1 Answer
1






active

oldest

votes

















up vote
0
down vote













to answer my own question. this is what i did and it is now working well



iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


replaced with the code below



iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 444:65535 -j DNAT --to-destination 10.10.10.1





share|improve this answer



























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    0
    down vote













    to answer my own question. this is what i did and it is now working well



    iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


    replaced with the code below



    iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 444:65535 -j DNAT --to-destination 10.10.10.1





    share|improve this answer
























      up vote
      0
      down vote













      to answer my own question. this is what i did and it is now working well



      iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


      replaced with the code below



      iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 444:65535 -j DNAT --to-destination 10.10.10.1





      share|improve this answer






















        up vote
        0
        down vote










        up vote
        0
        down vote









        to answer my own question. this is what i did and it is now working well



        iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


        replaced with the code below



        iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 444:65535 -j DNAT --to-destination 10.10.10.1





        share|improve this answer












        to answer my own question. this is what i did and it is now working well



        iptables -t nat -A PREROUTING -m mark --mark 99 -p all -j DNAT --to-destination 10.10.10.1


        replaced with the code below



        iptables -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 444:65535 -j DNAT --to-destination 10.10.10.1






        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Dec 4 at 7:58









        Ragnar2018

        1




        1












            Popular posts from this blog

            How to check contact read email or not when send email to Individual?

            Bahrain

            Postfix configuration issue with fips on centos 7; mailgun relay