Comments on: problems with wireless connection on firewall

By: trikaya369

trikaya369 — Fri, 09 Sep 2005 09:06:55 +0000

Hi !, You said that you don’t want unnecessary ports to be accessed, is that right. Use some traffic analysis tools to check on TCP/UDP ports open and use some other tools to redirect known traffic thru your configured ports in the Fwall.
This way you can monitor your clients traffic while keeping your infrastructure safe.
Hope it suffices.
Thanks

By: gert5142

gert5142 — Thu, 08 Sep 2005 09:41:48 +0000

I already tried logging dropped packets but I don’t see anything dropped. Where could I find the exact connection setup sequence from a WLAN card to an access point?

By: telecomking

telecomking — Thu, 08 Sep 2005 09:10:39 +0000

Most software based firewalls include a log of denied traffic. Your best bet is to watch the log and see what traffic is denied. You can then open the specific services you see are repeatedly blocked which are involved in maintaining the connection.

Alternatively, you can do the research on the protocols. However, you might need to check with your ISP to see what proprietary things they might be doing to secure the hot spot.

Best regards,
Telecomking

By: gert5142

gert5142 — Wed, 07 Sep 2005 02:46:43 +0000

I already tried to allow these services between the access point to the external interface:
- DHCP/BOOTP
- all ICMP
- HTTP (the access point seems to send an announcement message encapulated in an HTTP packet)