On 6 Aug 2012, at 03:01, Nguyễn Hồng Quân <quanngu...@mbm.vn> wrote:
> Hello, > I'm working on a captive portal based on WifiDog (under OpenWrt). My goal is > to allow to login to captive portal using Google, Facebook acount, via OAuth. > > Using OAuth requires to logging in to Google, Facebook. I want users to have > access to login form only, not the overall of Facebook, Google. > > As a captive portal, the traffic is controlled via iptables rules. However, > the iptables control on IP address. If I open the IP address of GG, FB login > form, users can access to the other part which share IP address with login > form. > > I tried the method: using iptables to redirect traffic to a proxy and do > filtering on proxy (Tinyproxy). But I was not successful because the OAuth > login form uses HTTPS, where the URL is encrypted and proxy failed to parse. > > Do you have any solution? What about doing a short say 2mins iptables based allow rule when a user is trying to login? -- Sent from a mobile device Tim Fletcher _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel