On 6 Aug 2012, at 03:01, Nguyễn Hồng Quân <quanngu...@mbm.vn> wrote:

> Hello,
> I'm working on a captive portal based on WifiDog (under OpenWrt). My goal is 
> to allow to login to captive portal using Google, Facebook acount, via OAuth.
> 
> Using OAuth requires to logging in to Google, Facebook. I want users to have 
> access to login form only, not the overall of Facebook, Google.
> 
> As a captive portal, the traffic is controlled via iptables rules. However, 
> the iptables control on IP address. If I open the IP address of GG, FB login 
> form, users can access to the other part which share IP address with login 
> form.
> 
> I tried the method: using iptables to redirect traffic to a proxy and do 
> filtering on proxy (Tinyproxy). But I was not successful because the OAuth 
> login form uses HTTPS, where the URL is encrypted and proxy failed to parse.
> 
> Do you have any solution?

What about doing a short say 2mins iptables based allow rule when a user is 
trying to login?

--

Sent from a mobile device

Tim Fletcher
_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Reply via email to