search

GraseHotspot / grase-www-portal

Grase WWW Portal (Main Package)
51 stars 20 forks source link

Ensure Hotspot Server can communicate back to clients #179

Open timwhite opened 6 years ago

timwhite commented 6 years ago

While you can currently ping from the hotspot server to a client, you can't initiate a new connection to a client.

Something like the following allows those connections to work.

diff --git a/chilli/up.sh b/chilli/up.sh
index bf6fbda..9f2c9c4 100755
--- a/chilli/up.sh
+++ b/chilli/up.sh
@@ -47,7 +47,8 @@ then
            ipt_in -p udp -d $ADDR --destination-port 67:68 -j ACCEPT
            ipt_in -p udp --dst $ADDR --dport 53 -j ACCEPT
            ipt_in -p icmp --dst $ADDR -j ACCEPT
-           
+          
+            ipt -A INPUT -i $TUNTAP -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT 
            ipt -A INPUT -i $TUNTAP --dst $ADDR -j DROP

            if [ "$ONLY8021Q" != "1" ]