Wifidog don't block traffic about wifidog-gateway

[benoitg]

Are you sure you have GatewayInterface set to the proper interface, your client's side of the router? Are you sure you are NATing or routing through your router, not just using it as an access point.

[medrockstar]

My access point is behind router.

how to check NATing or routing ?
internet-router-access point.

my config :

#GatewayID default

ExternalInterface wlan0

GatewayInterface br-lan

#GatewayAddress 192.168.1.1

[JJEU]

Hello,

there is a problem with your config.
benoit is right, your router is not configured like a router, it's just an access point.

to have router configuration, you need to edit /etc/config/network
or you can do this via the web interface but it's more difficult.

A definition of a router is a network device with 2 interface : LAN (toward the clients) and WAN (towards the internet).
a router is able to give communication to xxx number of client, accross a single IP on it's WAN interface. this is called NAT.
each client is identified with a single IP adress. this adress is used by the router to distribute the packets to the clients. it's called routing

let's see you /etc/config/network :

config interface 'lan' -> this identifies this section as the configuration of the LAN interface. wich name is "lan"
option ifname 'eth0' -> this link the "lan" interface to the hardware interface named "eth0". interfaces are named by the manufacturer like "eth0", "eth1", etc
option force_link '1'
option type 'bridge' -> this means that your device just transfers the packet. it's ats like a switch, not like a router. thus NAT is DISABLED and wifidog can't work !

following is the ip configuration of the lan interface :
option proto 'static'
option netmask '255.255.255.0'
option ip6assign '60'
option ipaddr '192.168.1.66'
option gateway '192.168.1.1'
option dns '192.168.1.1'

---

now lets see your wifidog.conf file

ExternalInterface wlan0 -> this means that your router is connecting to the internet with the wifi interface. usually it's not the case. in most case you connect to the internet with the RJ45 wire. so there it should be eth1 i guess

GatewayInterface br-lan -> this tells your router to use an interface name "br-lan" to connect the clients.
it's better to comment this line so wifidog auto detects, but usually you woud put here the same name as the lan interface configured in /etc/config/network.

---

what is your network looks like ? how it is plugged to the internet ?
also to know what is the name of each physical interface. you would have to check the wiki of openwrt with the name of your device.

Exemple : see here an exemple of a page listing the properties of a random router. if you scroll down you see how the ethernet assignation is done
https://wiki.openwrt.org/toh/pcengines/alix

---

My advice :
just download and install the latest stable version of openwrt to your hardware.
by default all the config files would be configured correctly.
you just have to connect in ssh, type "pswd to create a new password, reboot, and enter in the web configuration. go in software, update the list , the search for "wifidog, and install it. install nano too

go in ssh and type nano
and edit wifidog.conf with the name of your authpuppy server
then connect to the wifi with your cellphone, and try to browse an HTTP website (NOT HTTPS)

information about wifidog installation : https://openwrt.org/docs/guide-user/services/captive-portal/wireless.hotspot.wifidog?s%5B%5D=wifidog

[medrockstar]

Tks,

My installation is like this :

Internet - router (192.168.1.1) - switch - Openwrt (Wifidog)

Your configuration is for this installation ? because I already had router in network.