search

coova / coova-chilli

CoovaChilli is an open-source software access controller for captive portal hotspots.
Other
518 stars 260 forks source link

CoovaChilli-UAM-Allowed and CoovaChilli-Config #313

Open heruan opened 7 years ago

heruan commented 7 years ago

I've found a CoovaChilli-UAM-Allowed in dictionary.coovachilli and I wonder if and how can I use this attribute to pass to CoovaChilli a whitelist of allowed domain names.

Also, I'm looking for documentation about which configuration values are supported using the CoovaChilli-Config attribute when HS_RADIUSCONF = on.

jobezic commented 7 years ago

To pass to coovachilli a whitelist of allowed domains you have to use HS_UAMDOMAINS. HS_UAMDOMAINS=.fbcdn.net,.facebook.com,.facebook.net,.digicert.com,.googleapis.com,

heruan commented 7 years ago

Thank you @pinkra for the response. I'm aware of HS_UAMDOMAINS, I was referring to the configuration items I can fetch from a RADIUS server, and the meaning of the RADIUS attribute CoovaChilli-UAM-Allowed.

jobezic commented 7 years ago

It's not used..

heruan commented 6 years ago

@pinkra One clarification: what's the difference between HS_UAMALLOW and HS_UAMDOMAINS?

irongomme commented 6 years ago

@heruan

HS_UAMALLOW = DNS resolution for the address (ie: www.mysite.com), stored when chilli start. So it's a bad idea to use it when host can be resolved by several IP addresses.

HS_UAMDOMAINS = Whole domain without DNS resolution, so for exemple, google.com will open all googles sites - *.google.com, so it can be very persmissive with some kind of domains.

There is another alternative option : uamregex and it can be used with an host pattern

Playing with all those options let you make what you want !