Cant log in to some HTTPS pages can log to others

[DaveL]

I dont know if anyone else has had this problem. I can browse to some https sites from a client machine eg https://www.westpac.com.au/secure/publish.nsf/Content/PBOI+Online+Broking+Sign+In

but not some others eg

https://online.westpac.com.au/esis/Login/SrvPage or https://olb.westpac.com.au/esis/Login/SrvPage

The browser (IE7) just seems to time out

I can browse to the pages from the Firstspot machine so the firstspot machine can reach them.

Any Clues??

[alan]

First, I assume that your client PC is already logged in FirstSpot without problems.

Please try:
1) confirm that the DNS is working by issuing (in the client PC):

nslookup online.westpac.com.au
nslookup olb.westpac.com.au

2) use another browser like FireFox as a test

3) check out http://www.patronsoft.com/forum/viewtopic.php?p=5685#5685 to see whether it helps.
_________________
~ Patronsoft Limited ~

[DaveL]

nslookup for online.westpac.com.au returns
Server: firstspot.org
Address: 10.20.7.1

DNS request timed out
timeout was 2 seconds
Non-authoritative answer:
Name: online.westpac.com.au
Address: 203.24.6.136

nslookup for olb.westpac.com.au returns
Server: firstspot.org
Address: 10.20.7.1

DNS request timed out
timeout was 2 seconds
Non-authoritative answer:
Name: olb.westpac.com.au
Address: 203.24.6.60

[DaveL]

Firefox behaves exactly the same

[alan]

There is something wrong with your DNS.

FirstSpot DNS server is really a relay. It relies on the stability of your DNS server. By default, FirstSpot will forward the request to your Public Network Interface's DNS (if you have more than 1 DNS defined, the first one shown in ipconfig/all). Please double-check the stability of that particular DNS (e.g. use nslookup command).
_________________
~ Patronsoft Limited ~

[DaveL]

DNS seems to be OK
The Firstspot machine is able to browse to the problem sites, just not clients.

[alan]

No, there is definitely something wrong with the DNS (see the above log).

I suggest you change the "first" DNS of your Public Network Interface as FirstSpot DNS relay relies on it. Make sure you restart FirstSpot after the change. You might need to experiment with several DNS to see which one works okay.
_________________
~ Patronsoft Limited ~

[DavidL]

I have managed to get this working by setting MTU = 1500, and setting DNS in Firstspot DHCP server to the same as the Public NIC. The thing not working now is keywords
_________________
DavidL

[alan]

For Instant Keywords to work, the client PC needs to use FirstSpot DNS server. So you need to set back the "Preferred DNS server IP for the Private Network" parameter under DHCP category to 0.0.0.0. The key point is that you need to make sure the first DNS entry in your Public Network Interface works reliably (I suggest you set only one DNS setting for your Public Network Interface). If you still have problems, please post your:

1) ipconfig/all (in both FirstSpot and client PC)
2) config.ini file

BTW, changing MTU makes sense for your case since only some web sites failed to work (typical symptoms for MTU problem).
_________________
~ Patronsoft Limited ~

[DaveL]

;
; Description : FirstSpot setting ini file
;
; Filename : config.ini
;

; Note: use a backslash to separate directories and files, those lines starting with
; a semi-colon is considered as comment.
;
; Warning : please don't change this file without supervision of a PatronSoft Engineer
; It is highly recommended that you change the FirstSpot setting in the Web-based Configuration Manager

[version]
version=Advanced
versionDesc=5.0.0

[MNS]
; number of return paths
num_return_path=0
return_path0=

[DHCP]
leasetime=2880
num_ignored_addr=1
ignore_addr0=10.20.7.100
ignore_addr1=10.20.7.100
ignore_addr2=10.20.7.100

[Port Filter]
flt_num=
flt_0=

[QOS]
dl=
ul=
qos_num=
qos_0=

[Client Pass]
num_mac_addr=0
mac_0=
num_ip_addr=0
ip_0=

[proxyARP]
ip_num=0
ip_addr0=

;
; Redirect Login Page php file
;
[loginPhp]
Login_enable0=
Login_php_Num0=

;
; Gateway Settings
;
[gateway]
;Print Log Table
Datasource_Printlog=printlog

;Shared Secret Table Name
Datasource_Shared_Secret_Tablename=fssecret

;maximum timelimit per session in minutes (global), 0 = never
sessionlimit =

;URL tracking, default off
Trace_URL=0

;URL tracking interval, do not log the same url for particular user in x mins
Trace_URL_Interval=30

;URL tracking table
Datasource_URL_Log_Tablename=fsurl

;extra-information field table name
Datasource_extra_field_table = aexlog

;demo_mode=on, off (default)
;
;This demo_mode parameter is for FirstSpot channel partners demonstration purpose
;If demo_mode=on, FirstSpot DNS Server and Web Server will perform a catch-all on all
;requests. After the user login, the client will always see the "firstspotdemo" page.
demo_mode=off

;redirect user to cart.php when login fails
redirect_cart=1

;Client Isolation, NetBIOS over TCP/IP, Default is Disabled
netbios=1

;Scenario 2 (Distributed Network Topology)
scenario2=0

; Post-Startup Batch File Path Name
batch_filePath =

; lan's subnet mask (please change this through Configuration Manager only)
;
subnet_mask =255.255.255.0

; domain name server IP address
;
DNS =0.0.0.0

; domain name server IP address
;
preferred_DNS =0.0.0.0

; domain name server IP address
;
alternate_DNS =61.9.133.193

; username
;
user =Nelson

; password
;
pass =3d15d767f768d309e95e54635daff225

;Number of maximum administrator account
max_admin_account = 10

;Administrator username
admin_username0 =Nelson
admin_username1 =Kerri
admin_username2 =Krystle
admin_username3 =DavidS
admin_username4 =Sandra
admin_username5 =Kathleen
admin_username6 =
admin_username7 =
admin_username8 =
admin_username9 =

;Administrator password
admin_password0 =3d15d767f768d309e95e54635daff225
admin_password1 =946577b4f489b243dbfc2e52347e652d
admin_password2 =59bf51245bba41eb3e4c6d2d82c4ebb6
admin_password3 =b85e52b17c950f290568ca766b863db0
admin_password4 =ef21f492bbba9b7632f139f357ba9df3
admin_password5 =9c9c0ee02ab6d29c696edf2eaf9dde54
admin_password6 =
admin_password7 =
admin_password8 =
admin_password9 =

;Administrator parameter
admin_parameter0 =11111111111111111111111
admin_parameter1 =00000000000000000000010
admin_parameter2 =00000000000000000000010
admin_parameter3 =00000000000000000000010
admin_parameter4 =00000000000000000000010
admin_parameter5 =00000000000000000000010
admin_parameter6 =
admin_parameter7 =
admin_parameter8 =
admin_parameter9 =

; network interface card connected to Internet (after modify this, need to restart FirstSpot)
;
publicNIC=Local Area Connection

; network interface card connected Hotspots or visitor-based networks (after modify this, need to bind the FirstHop driver
; to this new card and unbind the FirstHop driver from ALL other cards, then reboot Windows)
;
privateNIC=Local Area Connection 2

; data source for user login
;
Datasource =C:\Program Files\FirstSpot\datasource\firstspot.dsn

; datasource table for user login
;
Datasource_Tablename = fsusr

; datasource table for user login
Datasource_Plans_Tablename = fsplans

; enable session logging into the datasource log table
session_log =ON

; datasource table for user session logging
;
Datasource_Log_Tablename = fsusrlog

; datasource table for PayPal
;
Datasource_PayPal_Table=ppal

; port used by Gateway Service
;
port =5786

; port used by Authentication Server
;
auth_port =5788

; port used by ssl site
;
ssl_port =5789

; Greeting message displayed in login page
;
greeting_msg =Welcome to our Hotspot!

; Enable to show InfoBox
;
show_infobox =ON

; Logout automatically when Infobox is closed
;
check_infobox_closed =OFF

; port used by infobox
;
infobox_port =5795

; authentication server IP address (please change this through Configuration Manager only)
; Note: different from gateway_IP when it is not installed in gateway (not officially supported in this version)
;
auth_IP =10.20.7.1

; login page filename which dispatcher will call
;
loginpage =login_select.php

; login form filename which login_select.php will call
;
loginform =login_form.php

; anonymous login form filename which login_select.php will call
;
a_loginform =alogin_form.php

; authentication form filename which authentication.php will call
;
reauthenticationform =reauth_form.php

; anonymous authentication form filename which authentication.php will call
;
a_reauthenticationform =alogout_form.php

; idle time (minutes) allowed for authenticated users
;
idle_timeout =10

; private network (please change this through Configuration Manager only)
;
private_IP =10.20.7.0

; gateway IP address (please change this through Configuration Manager only)
;
gateway_IP =10.20.7.1

; allow access to config manager from private network?
;
access_from_private =off

; allow access to config manager from public network?
;
access_from_public =ON

; license file path
;
licensepath =C:\Program Files\FirstSpot\

; session handling mode, 0 for MAC-based, 1 for IP-based
session_handling =0

; path for dhcp config
dhcppath =C:\Program Files\FirstSpot\dhcp\dhcpservice.ini

; dhcp mode, 0 = auto, 1 = static, 2 = disabled
dhcpmode =0

; for static dhcp only, path of the Ip MAC mapping list
static_dhcp_path =C:\Program Files\FirstSpot\StaticDHCP.txt

; anonymous login
anonymous_login =OFF

; secret enable
secret_enable=off

; secret code
secret_code=0aed120c6f7090a5b26a4c93df382b21

; anonymous login user table name
Datasource_Anonymous_Tablename =fsa

; anonymous login log table name
Datasource_Anonymous_Log_Tablename =fsalog

; password offloading mode
pwd_offload = off

; password encryption directory path
encrypt_path =C:\Program Files\FirstSpot\dispatcher\encrypt_pwd.exe

; initial air time in minutes for self signup users
self_sign_up_credit=0

; initial plan for self signup users
self_sign_up_plan=

; self signup option
self_sign_up_option=0
self_sign_up_redirect=http://www.google.com

; self signup filtering
self_signup_filter=1

;allow self-signup without an ip/mac, 0=yes, 1=no
self_signup_no_mac=1

; null=no filter, 0 = signup once, >0 after x mins
self_signup_period=

;CAPTCHA option
self_sign_up_captcha_check=on

;use 3 party ssl cert 0=yes 1=no
ssl_cert=1

;secure socket layer for authentication
;443 for enabled SSL, auth_port=ssl_auth_port for disabled ssl
ssl_auth_port=5788

;rewrite engine for http to https redirection
rewrite_engine=off

;maximum fail attempt allowed
max_attempt=

;If user accesses http://10.20.7.1:5788 directly, redirect the request to any non-existing ip,
;so that driver can capture the request properly.
;DO NOT put any unresolvable domain name here
redirect_address=http://192.168.1.42/logged_in.html

;port to handle https request in apache when user is not authenticate
redirect_port=5790

; DNS suffix
dns_suffix=firstspot.org

;unauthorized access restricted to port 80 and 443 only.
; On=1, Off=0
restricted_redirect=1

; start up redirect
; 0= no redirect, 1=redirect to below link
start_up_redirect_option =0
start_up_redirect_url =
start_up_redirect_wait =5

; Redirect page picture (filename)
;
redirectpage_pic_name=
redirectpage_pic_name_html=

; Login page picture (filename)
;
random=0
loginpage_pic_count=1
loginpage_pic_html0=
loginpage_pic_html1=
loginpage_pic_html2=
loginpage_pic_html3=
loginpage_pic_html4=
loginpage_pic_html5=
loginpage_pic_html6=
loginpage_pic_html7=
loginpage_pic_html8=
loginpage_pic_html9=
loginpage_pic_html10=
loginpage_pic_html11=
loginpage_pic_html12=
loginpage_pic_html13=
loginpage_pic_html14=
loginpage_pic_html15=
loginpage_pic_html16=
loginpage_pic_html17=
loginpage_pic_html18=
loginpage_pic_html19=
loginpage_pic0=rycv.jpg

;maximum number of concurrent users, blank / 0 = unlimited
max_conc_user=
loginpage_pic_name=rycv.JPG


; Allowed Hosts Settings
;
[allowed hosts]
; allowed hosts keywords file path
;
hosts_keywords_path =C:\Program Files\FirstSpot\AllowedHostsKeywords.txt

; allowed hosts IPs file path
;
hosts_ips_path =C:\Program Files\FirstSpot\AllowedHostsIps.txt


; Bandwidth Throttle Settings
[bw_throttle]
; Bandwidth Throttle Mode
bt_mode =0

; Overall Upload Limit (at least 20KB/s recommended)
bt_ul_limit =0

; Overall Download Limit (at least 20KB/s recommended)
bt_dl_limit =0

; low, medium and high definition
bt_low=100
bt_medium=50
bt_high=20
bt_drop_period=2

[bwreset]
bwresetmethod=
bwresetperiod=
lastresetbw=
sdate=

[creditcard]
payment_method=ppal

[paypal]
; Business id
;
ppal_business=your_business_id@your_email.com

; URL for successful transactions
;
ppal_return=http://10.20.7.1:5788/cart.php

; URL for cancelled transactions
;
ppal_cancel_return=http://10.20.7.1:5788/cart.php

; trust "Pending"=="Complete"?
;
ppal_pending_release=no

; the settlement currency
;
ppal_base_currency=USD

; URL for notify
;
ppal_notify_url=http://fixed_ip:5789

; Starting number for invoice
;
ppal_invoice_start=1

[worldpay]
; Installation id
;
wpay_instID=your_installation_ID

; the settlement currency
;
wpay_base_currency=USD

; URL for notify
;
wpay_notify_url=http://fixed_ip:5789

; Test Mode
; 100 : test mode - always successful validation
; 101 : test mode - always failed validation
; 0 : test mode - live mode, not testing
;
wpay_testmode=0

[AuthorizeNet]

;login id
aNet_id=

;transaction key
aNet_key=

aNet_hash=

aNet_base_currency=USD

; URL for notify
aNet_notify_url=http://fixed_ip

; Test Mode
; 0 : test mode - live mode, not testing
; 1 : test mode - testing only
aNet_testmode=0

[googleCheckout]
; Merchant id
;
checkout_merchant_id=

; URL for successful transactions
;
checkout_return=http://10.20.7.1:5788/cart.php

; URL for cancelled transactions
;
checkout_cancel_return=http://10.20.7.1:5788/cart.php

; the settlement currency
;
checkout_base_currency=USD

; URL for notify
;
checkout_notify_url=http://fixed_ip:5789

[User_defined_payment]
id=login_id
pin1=
pin2=
currency=USD
notify_url=http://

[PrinterOn]

PrintSupport=0
SiteURL=
SiteUID=
SiteAuth=
; show siteURL
show_URL_login=1
show_URL_infobox=1

[lang]
; default language file
default_lang_file=lang.php
default_lang_file_attributes=English;en,en-us;iso-8859-1
; number of other language files
lang_fileNumber=0
; other luguage files
lang_file1=
lang_file1_attributes=
lang_file2=
lang_file2_attributes=
lang_file3=
lang_file3_attributes=
lang_file4=
lang_file4_attributes=
lang_file5=
lang_file5_attributes=
; show character encoding
; 0 : hide
; 1 : show
show_charset=1

lang_pack_file=custom_lang.php
cmlang_pack_file=custom_cmlang.php
last_logout=logout
this_logout=logout
last_info=infobox
this_info=infobox
last_cart=cart
this_cart=cart
key_0=
url_0=
ReqSignUp01=off
ReqSignUp02=off
ReqSignUp03=off
ReqSignUp04=off
ReqSignUp05=off
ReqSignUp06=off
ReqSignUp07=off
ReqSignUp08=off
ReqSignUp09=off
ReqSignUp10=off

; Setting of cart description
[cart]
reset_bw_count_upon_purchase=1
max_slot_open=0

[radius]
use_radius=false
ServerIP=10.20.7.1
AuthPort=1812
AccPort=1813
Secret=secret
FSVendorID=2004
Datasource=C:\Program Files\FirstSpot\datasource\radius.dsn
Datasource_Tablename=fsRadius
Acc_Start=true
Acc_Stop=true
;Acc_FSLogin=true
;Acc_FSLogout=true
;Acc_FSWriteLog=true

[radiusAuthentication]
NAS_IDENTIFIER=FirstSpot
;NAS_IP_ADDRESS=the private nic ip, this can be edited.
;CALLING_STATION_ID=client nic mac or ip, depends on the Firstspot setting, this can not be edited.
;CALLED_STATION_ID=firstspot private nic mac, this can not be edited.

[radiusCustomAttribute]
;Vendor spec type for Firstspot
;fixed value can not be changed.
;
;FS_AUTH_TIMELEFT=1
;FS_AUTH_ACCUMBW=2
;FS_AUTH_BWQUOTA=3
;FS_AUTH_BWCOUNT=4
;FS_AUTH_ULLIMIT=5
;FS_AUTH_DLLIMIT=6
;FS_AUTH_LOGINTIME=7
;FS_AUTH_LOGOUTTIME=8
;FS_AUTH_TIMEDIFF=9
;FS_AUTH_BWUSAGE=10

;Account Status Type Attributes, can be changed.
;
;default ACCT_STATUS_FSLOGIN=217
;default ACCT_STATUS_FSLOGOUT=218
;default ACCT_STATUS_FSWRITELOG=219

[prepaidCard]
random_usr_prefix=usr_
random_usr_suffix_salt=abcdefghjkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ123456789
random_usr_suffix_length=5
pwd_salt=abcdefghjkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ123456789
pwd_length=7

[ACL]
num_acl=0

[fssmtp]
smtp =true
MailLogOffset=24
IspSmtpDomain=mail.bigpond.com
SmtpPort=
IspSmtpAuthLogin=false
IspSmtpUserName=
IspSmtpPassword=
rcptMax=
mailsize=
execTime=
receivedMail0=0

[users]
; 0= default format
; 1= past format option
slip_format_option =0
; default format
default_slip_title= Welcome to use FirstSpot System
default_slip_title_size= 0
default_slip_end= Thank You
default_slip_end_size= 0
; Past format
past_slip_title=
past_slip_title_size=0
past_slip_end=
past_slip_end_size=0

[NAT]
Enable=1
Type=0
NAT_AddrR_Count=0
NAT_portmap_count=0

[mac_filter]
mac_count=0

[ip_filter]
ip_count=0

[FSFO]
mode=
BackupMode=3
Main_IP=
Main_DNS=
Main_NIC=
BackUp_IP=
BackUp_DNS=
BackUp_NIC=
Port=
_enable_fo_dp=0

[bulk]
enable_slip_preview=1
slip_per_page=5

[DataTransfer]
bwcount_dl=0
bwcount_ul=0

[misc]
show_cart=yes
enable_chgpwd=1
time_reminder=1
remindMin=5
removePeriod=30
block_icmp=on
block_udp=on
_debug=1
pkt_period=20
_skip_nic_disable_enable=true
oem=C:\WINDOWS\INF\oem1.inf
PublicAdapterIP=192.168.1.42
PublicAdapterIpMask=255.255.255.0
PublicAdapterGateway=192.168.1.1
PrivateMAC=0040f4ea2c83


Is there an address I can email screencapture of ipconfig/all for client and server?

[alan]

Just click top-left icon of the command windows and you can do a text copy and paste.
_________________
~ Patronsoft Limited ~

[DaveL]

Server
Windows IP Configuration



Host Name . . . . . . . . . . . . : members

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : Yes

WINS Proxy Enabled. . . . . . . . : Yes



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : SiS 900 PCI Fast Ethernet Adapter

Physical Address. . . . . . . . . : 00-0F-EA-71-F8-4C

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.1.42

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.1.1

DNS Servers . . . . . . . . . . . : 192.168.1.1

61.9.133.193

Primary WINS Server . . . . . . . : 192.168.1.2

Secondary WINS Server . . . . . . : 192.168.1.1



Ethernet adapter Local Area Connection 2:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet NIC

Physical Address. . . . . . . . . : 00-40-F4-EA-2C-83

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 10.20.7.1

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :


Client
Windows IP Configuration



Host Name . . . . . . . . . . . . : Academy

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : firstspot.org



Ethernet adapter WAN (On Board):



Connection-specific DNS Suffix . : firstspot.org

Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast Ethernet NIC

Physical Address. . . . . . . . . : 00-0D-61-83-35-F8

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 10.20.7.233

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.20.7.1

DHCP Server . . . . . . . . . . . : 10.20.7.1

DNS Servers . . . . . . . . . . . : 10.20.7.1

61.9.133.193

Primary WINS Server . . . . . . . : 10.20.7.1

Lease Obtained. . . . . . . . . . : Monday, 17 December 2007 5:34:15 PM

Lease Expires . . . . . . . . . . : Wednesday, 19 December 2007 5:34:15 PM

[alan]

Okay, you need to :

1) change your DNS for your Public Network Interface to 61.9.133.193 ONLY

2) change both "Preferred DNS server IP for the Private Network" and "Alternate DNS server IP for the Private Network" under DHCP category of Configuration Manager to 0.0.0.0

3) restart FirstSpot
_________________
~ Patronsoft Limited ~

[DaveL]

All working properly now.
Thanks