SearchSearch   ProfileProfile   Log inLog in   RegisterRegister 

Firstspot & HTTP POST fowarding
Goto page 1, 2  Next
 
Post new topic   Reply to topic    FirstSpot Forum Index -> Pre-sales Support Forum
View previous topic :: View next topic  
Author Message
madev



Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France

PostPosted: Tue Sep 03, 2013 9:20 am    
Post subject: Firstspot & HTTP POST fowarding

Hi,

We installed firstspot server for our wireless guest infrastrure 3 months ago, and everything was working fine when we tested it.

We received an incident for an issue with a specific website which is not working. Login page is accessible, but when user try to log in there is a network error message.

After some research, I noticed that this website was using HTTP POST in order to send login & password, and it seems that this request is not well formated when it pass throught firstspot server.

I made network snapshot of what is send from the laptop user, and what is send from the server, and there is a character missing in it. Web server doesn't understand the packet and send an http error 503.

Is it a known issue ? a configuration mistake ? a bug ?

Thanks for your help.

Matthieu Deville
Volvo IT

laptop:


server publicNIC
Back to top
alan
Forum facilitator


Joined: 26 Sep 2003
Posts: 4435

PostPosted: Tue Sep 03, 2013 9:33 am    
Post subject:

Does the client access the web site as a initial web access (before login)? Can you post (or email us at firstspot@patronsoft.com) the original URL so that we can test it from our side?
_________________
~ Patronsoft Limited ~
Back to top
madev



Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France

PostPosted: Tue Sep 03, 2013 9:58 am    
Post subject:

Yes, the client access to login page. It is only when he tries to put his login/password.

Website : http://www.optifleet.net
You can try even if you don't have an account, put what you want in login/password.
Back to top
alan
Forum facilitator


Joined: 26 Sep 2003
Posts: 4435

PostPosted: Tue Sep 03, 2013 10:00 am    
Post subject:

My question is : did he login Firstspot before accessing this page?

This is different than access this page first before FirstSpot login.
_________________
~ Patronsoft Limited ~
Back to top
madev



Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France

PostPosted: Tue Sep 03, 2013 10:06 am    
Post subject:

Yes, the user is logged in patronsoft.

I also tried to add this webpage in the list of free websites, and try to not log in patronsoft, but it is the same issue.
Back to top
alan
Forum facilitator


Joined: 26 Sep 2003
Posts: 4435

PostPosted: Tue Sep 03, 2013 10:08 am    
Post subject:

In that case, can you turn off In-Browser Message, and then restart FirstSpot?
_________________
~ Patronsoft Limited ~
Back to top
LynxX



Joined: 29 Jun 2011
Posts: 22
Location: Sweden

PostPosted: Tue Sep 03, 2013 11:06 am    
Post subject:

Hi,

We got the same situation here in Gothenburg with this web page.
The In-Browser Message are already disabled.

Best Regards
Johan Loberg
Volvo IT
Back to top
alan
Forum facilitator


Joined: 26 Sep 2003
Posts: 4435

PostPosted: Tue Sep 03, 2013 11:21 am    
Post subject:

Strange. FirstSpot doesn't really touch the web page (except In-Browser Message) after login.

Maybe it is related to NAT?
_________________
~ Patronsoft Limited ~
Back to top
madev



Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France

PostPosted: Tue Sep 03, 2013 12:00 pm    
Post subject:

Do you mean when it is using publicNIC ?

Our NAT (in order to go on Internet) is done after.
Back to top
alan
Forum facilitator


Joined: 26 Sep 2003
Posts: 4435

PostPosted: Tue Sep 03, 2013 1:43 pm    
Post subject:

I mean the NAT within FirstSpot.

The other thing to check is the MTU value of your Internet connection. What type of Internet connection are you currently using?
_________________
~ Patronsoft Limited ~
Back to top
madev



Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France

PostPosted: Tue Sep 03, 2013 1:57 pm    
Post subject:

We are not using NAT function in firstspot.

We have configure tcp mss-adjust to 1360 in our routers (in France and in Sweden as Johan said). We have the same configuration for patronsoft, lan & wan.

I am not sure to understand exactly what you mean by "what type of Internet connection". Here in France we have a dedicated BGP AS with Orange with 150Mbps, 10 of them are dedicated for guest services.
Back to top
LynxX



Joined: 29 Jun 2011
Posts: 22
Location: Sweden

PostPosted: Tue Sep 03, 2013 2:05 pm    
Post subject:

Hi,

We are using the "direct port 80" functionality to a surf proxy.
May this function cause the problem?

BR/ Johan
Back to top
alan
Forum facilitator


Joined: 26 Sep 2003
Posts: 4435

PostPosted: Tue Sep 03, 2013 2:06 pm    
Post subject:

My guess is your problem is related to MTU. Please check out http://patronsoft.com/forum/viewtopic.php?t=2290 for a similar case.
_________________
~ Patronsoft Limited ~
Back to top
alan
Forum facilitator


Joined: 26 Sep 2003
Posts: 4435

PostPosted: Tue Sep 03, 2013 2:08 pm    
Post subject:

Maybe you can turn off proxy to narrow down the problem as well?
_________________
~ Patronsoft Limited ~
Back to top
madev



Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France

PostPosted: Tue Sep 03, 2013 2:15 pm    
Post subject:

packet length is 648, I can try to change the MTU but I am not sure it will change something (as I have to configure something under 648 which is really small)

In network capture i sent from firstspot side, we can see that the packet is badly formatted before it goes to proxy.

it is well formated when it goes througt firstspot privateNIC, and then badly formated trhougt publicNIC
Back to top
Display posts from previous:   
Post new topic   Reply to topic    FirstSpot Forum Index -> Pre-sales Support Forum All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group