Hello 

 

I finished to configure a dmz web-proxy In another mail to the m0n0 maillist
I wrote my situation:

 

Specifications:

 

Router m0n0wall witch 4 NICs:

 

LAN  (rlo) 192.168.1.1

 

WAN (cs1) pppoe-client, Internet gateway.

 

DMZ (rl1) 192.168.2.1

 

Hotspot (rl2) 192.168.3.1

 

 All the Hotspot traffic (192.168.3.0/24) must be redirect to the squid
web-proxy in the DMZ subnet ( Server IP: 192.168.2.2), i experiment with the
inbound NAT: 

 

If: hotspot

Proto: tcp

Ext.port range: 80

NAT ip: 192.168.2.2

Int. Port range: 3128

 

The configurtion Works, all the traffic of hotspot users is redirect to
192.168.2.2 (I can see that in iptraf or in the sarg report or in squid
logs). but I have a new problem:

The captive portal (configured in hotspot interface) dont work. Is logic,
because the trafic is natted to the Proxy-server, after I try to  disable
the captive portal in hotspot interface and enable de portal in DMZ
interface, but still not working. I dont know how portal captive Works, I
can see that Works in the 8000 tcp port, but the rules not are present in
the firewall rules.

I finís all my ideas,

Any sugestions?

 

Thanks in advance

 

Zaterio