| View previous topic :: View next topic |
| Author |
Message |
madev
Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France
|
 Posted: Tue Sep 03, 2013 9:20 am
Post subject: Firstspot & HTTP POST fowarding |
|
|
Hi,
We installed firstspot server for our wireless guest infrastrure 3 months ago, and everything was working fine when we tested it.
We received an incident for an issue with a specific website which is not working. Login page is accessible, but when user try to log in there is a network error message.
After some research, I noticed that this website was using HTTP POST in order to send login & password, and it seems that this request is not well formated when it pass throught firstspot server.
I made network snapshot of what is send from the laptop user, and what is send from the server, and there is a character missing in it. Web server doesn't understand the packet and send an http error 503.
Is it a known issue ? a configuration mistake ? a bug ?
Thanks for your help.
Matthieu Deville
Volvo IT
laptop:
server publicNIC
 |
|
| Back to top |
|
 |
alan
Forum facilitator
Joined: 26 Sep 2003
Posts: 4435
|
Posted: Tue Sep 03, 2013 9:33 am
Post subject: |
|
|
Does the client access the web site as a initial web access (before login)? Can you post (or email us at firstspot@patronsoft.com) the original URL so that we can test it from our side?
_________________
~ Patronsoft Limited ~ |
|
| Back to top |
|
|
madev
Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France
|
Posted: Tue Sep 03, 2013 9:58 am
Post subject: |
|
|
Yes, the client access to login page. It is only when he tries to put his login/password.
Website : http://www.optifleet.net
You can try even if you don't have an account, put what you want in login/password. |
|
| Back to top |
|
|
alan
Forum facilitator
Joined: 26 Sep 2003
Posts: 4435
|
Posted: Tue Sep 03, 2013 10:00 am
Post subject: |
|
|
My question is : did he login Firstspot before accessing this page?
This is different than access this page first before FirstSpot login.
_________________
~ Patronsoft Limited ~ |
|
| Back to top |
|
|
madev
Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France
|
Posted: Tue Sep 03, 2013 10:06 am
Post subject: |
|
|
Yes, the user is logged in patronsoft.
I also tried to add this webpage in the list of free websites, and try to not log in patronsoft, but it is the same issue. |
|
| Back to top |
|
|
alan
Forum facilitator
Joined: 26 Sep 2003
Posts: 4435
|
Posted: Tue Sep 03, 2013 10:08 am
Post subject: |
|
|
In that case, can you turn off In-Browser Message, and then restart FirstSpot?
_________________
~ Patronsoft Limited ~ |
|
| Back to top |
|
|
LynxX
Joined: 29 Jun 2011
Posts: 22
Location: Sweden
|
Posted: Tue Sep 03, 2013 11:06 am
Post subject: |
|
|
Hi,
We got the same situation here in Gothenburg with this web page.
The In-Browser Message are already disabled.
Best Regards
Johan Loberg
Volvo IT |
|
| Back to top |
|
|
alan
Forum facilitator
Joined: 26 Sep 2003
Posts: 4435
|
Posted: Tue Sep 03, 2013 11:21 am
Post subject: |
|
|
Strange. FirstSpot doesn't really touch the web page (except In-Browser Message) after login.
Maybe it is related to NAT?
_________________
~ Patronsoft Limited ~ |
|
| Back to top |
|
|
madev
Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France
|
Posted: Tue Sep 03, 2013 12:00 pm
Post subject: |
|
|
Do you mean when it is using publicNIC ?
Our NAT (in order to go on Internet) is done after. |
|
| Back to top |
|
|
alan
Forum facilitator
Joined: 26 Sep 2003
Posts: 4435
|
Posted: Tue Sep 03, 2013 1:43 pm
Post subject: |
|
|
I mean the NAT within FirstSpot.
The other thing to check is the MTU value of your Internet connection. What type of Internet connection are you currently using?
_________________
~ Patronsoft Limited ~ |
|
| Back to top |
|
|
madev
Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France
|
Posted: Tue Sep 03, 2013 1:57 pm
Post subject: |
|
|
We are not using NAT function in firstspot.
We have configure tcp mss-adjust to 1360 in our routers (in France and in Sweden as Johan said). We have the same configuration for patronsoft, lan & wan.
I am not sure to understand exactly what you mean by "what type of Internet connection". Here in France we have a dedicated BGP AS with Orange with 150Mbps, 10 of them are dedicated for guest services. |
|
| Back to top |
|
|
LynxX
Joined: 29 Jun 2011
Posts: 22
Location: Sweden
|
Posted: Tue Sep 03, 2013 2:05 pm
Post subject: |
|
|
Hi,
We are using the "direct port 80" functionality to a surf proxy.
May this function cause the problem?
BR/ Johan |
|
| Back to top |
|
|
alan
Forum facilitator
Joined: 26 Sep 2003
Posts: 4435
|
|
| Back to top |
|
|
alan
Forum facilitator
Joined: 26 Sep 2003
Posts: 4435
|
Posted: Tue Sep 03, 2013 2:08 pm
Post subject: |
|
|
Maybe you can turn off proxy to narrow down the problem as well?
_________________
~ Patronsoft Limited ~ |
|
| Back to top |
|
|
madev
Joined: 03 Sep 2013
Posts: 11
Location: Lyon - France
|
Posted: Tue Sep 03, 2013 2:15 pm
Post subject: |
|
|
packet length is 648, I can try to change the MTU but I am not sure it will change something (as I have to configure something under 648 which is really small)
In network capture i sent from firstspot side, we can see that the packet is badly formatted before it goes to proxy.
it is well formated when it goes througt firstspot privateNIC, and then badly formated trhougt publicNIC |
|
| Back to top |
|
|
|
Search
Profile
Log in
Register
