Changeset 10419 in hybrid for branches/releng-9.0/nanobsd/files/etc

Timestamp:

Apr 10, 2012, 7:35:39 PM (13 years ago)

Author:

rick

Message:

Rewrote Captive Portal to use Packet Filter (pf) instead. This is much robuster and better administrable then ipfw.

Also cleaned out most of the ugly looking cache code.

Location:

branches/releng-9.0/nanobsd/files/etc

Files:

• crontab (modified) (2 diffs)
• pf.node.conf (added)
• rc.conf (modified) (3 diffs)

branches/releng-9.0/nanobsd/files/etc/crontab

@@ -4 +4 @@
 #
 SHELL=/bin/sh
-PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin
+PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin
 HOME=/var/log
 #
@@ -33 +33 @@
 # Nagios checks
 */15    *       *       *       *       root    /usr/local/sbin/check-inet-alive
+#
+*/5     *       *       *       *       root    /usr/local/www/wlportal/index.cgi cleanup
+

branches/releng-9.0/nanobsd/files/etc/rc.conf

@@ -1 +1 @@
 # No kernel dumps as we don't have a place to store them 
 dumpdev="NO"                    
-# We are an router/gateway (wireless to be precise)
+
+# We are an router/gateway (wireless to be precise) running the lvrouted
+# routing daemon.
 gateway_enable="YES"
+lvrouted_enable="YES"
+lvrouted_flags="-u -s s00p3rs3kr3t -m 28"
 
 # NTP server needs working config with WL network or internet on boot
@@ -30 +34 @@
 
 # HTTP(S) proxy server
-tinyproxy_enable="YES"
+tinyproxy_enable="NO"
 
 # Make sure generated ssh keys are saved 
@@ -54 +58 @@
 pf_enable="YES"
 pf_rules="/etc/pf.open.conf"
+pf_flags=''
+# Used with /etc/pf.proxy.conf
+# pf_flags="-D ext_if=vr0 -D int_if=vr1 -D publicnat={80,443}"
+# Used with /etc/pf.node.conf
+# pf_flags="-D captive_portal_interfaces=wlan0,wlan1"