News: This forum is now permanently frozen.
Pages: [1]
Topic: How to use Domain name instead of allowed IP address in Captive Portal  (Read 6359 times)
« on: April 29, 2008, 10:56:25 »
fanis *
Posts: 8

Hello all,

i wonder if there is a way to use a domain name instead of an IP address to allow to pass the captive portal before authentication.

I beleive we all need this because some services, like PayPal, Thawte, etc, changing their IP's almost everyday so it's impossible to watch all the time and make the changes of the IP's. There was an older post, but no replies or a solution.

Any help will be greatly appreciated.
« Reply #1 on: June 02, 2008, 10:23:50 »
knightmb ****
Posts: 341

Not as far as the current release of 1.233, I haven't found a non-hack way to do this yet.

Radius Service for m0n0wall Captive Portal - http://amaranthinetech.com
« Reply #2 on: July 15, 2008, 18:51:28 »
pk *
Posts: 6

Yeah, this is a problem for me too.  I would even like the ability to put network blocks in: 1.2.3.0/24.

What I have done is used the DNS forwarder to override the DNS for Paypal, PayPalObjects, and a few others to specific IP addresses.  That works well.  They did change last month, but it was running for a few years before that.
« Last Edit: July 15, 2008, 18:54:22 by pk »
« Reply #3 on: June 26, 2009, 20:55:13 »
richardv *
Posts: 26

Is there someone who has an answer for this problem?
I will set a internetsite on the free-list with a video stream (local tv-station).
But they used different ip adresse for it.
Someone?
« Reply #4 on: June 26, 2009, 21:48:25 »
satlizard26 *
Posts: 26

You can, but you must use a a certificate and there is a option to specify the Common Name (CN) in the portal setup. The CN name is basically the FQDN name of you server and must be accessible from outside and inside the network through DNS. Only problem is it has to be a valid certificate with a Trusted Root authority, like Verisign, etc
« Reply #5 on: June 26, 2009, 21:51:10 »
satlizard26 *
Posts: 26

Sorry misread the initial response. Not the same option. Sorry
« Reply #6 on: September 13, 2009, 18:43:28 »
Lee Sharp *****
Posts: 517

No.  It has to do with the logic of the way CP works.  It never looks up the name.  It just does pattern matching on the destination IP.  This is why a netmask will not work either.
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines