OpenWrt Forum Archive

Topic: Connecting router to Brit Telecom wifi hotspot as client.....

The content of this topic has been archived on 28 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

I sometimes do work at a location with no broadband or local wifi access, however I'm just on the limit of detecting a nearby BT wifi hotspot.  While my tablet and phones can't get a good connection it occured to me I could take a spare DIR 825 I recently built and use that as a client to connect to the BT hotspot (I do have a valid account with BT).  The validation for connecting to the hotspot is done by entering my email address and password into a web browser challenge when I connect.

I played around this afternoon with the DIR 825 configured the way I would for a client setup normally however I cannot access the logon page properly as it won't show up properly.  Some stuff is working as I'm picking up an IP and any page I attempt to access is redirecting to the BT logon page, which then won't load properly.

Any ideas?

Thanks in advance.

Anyone have any suggestions?

Last request.

What exactly is your setup? Is it configured in client mode with NAT or routed or bridged, etc?

Hi pinnoccio

I know it's been a while, but I have been struggling with this recently, but the good news is I've got to the bottom of it.

As you correctly identified the basics were all correct, you were assigned an IP address from the BT WiFi / BT OpenZone hotpot and it intercepted your web request and tried to forward you to the web-based login form (https://www.btopenzone.com:8443).

The reason this fails to load is that that OpenWRT doesn't resolve the DNS request for www.btopenzone.com

I am not entirely sure the full details behind this, but OpenWRT is trying to protect you from a DNS rebinding attach (More info: http://www.circleid.com/posts/070809_de … _attacks/)

This protection is set by Network > DHCP and DNS > General Settings > Rebind protection (within LuCI).

You could either disable this  protection, or, possibly better still, you can white-list btwifi.com and btopenzone.com to exclude these domains from the protection. This means you router should always work whether you are accessing the internet via WiFi client mode or the WAN ethernet port.

Hope this helps

Matt

Does this mean that all the users connected to this Wifi are authenticated?

The reason I'm asking this, is because this summer we will be on vacation in a place where a Wifi Hotstop is available, with authentication through a login page.

If I would connect the OpenWRT Router to the Hotspot, and let my tablet and laptop connect to my own Wifi (or wired to the OpenWRT router), should only my tablet or my laptop login?  (i.e.: which device is authenticated, my router, or the router's client, being either my laptop or tablet?)

P.S.: I don't thoroughly understand the authentication of hotspots, hence my question

Thanks
Steven

mattbunce wrote:

Hi pinnoccio

I know it's been a while, but I have been struggling with this recently, but the good news is I've got to the bottom of it.

As you correctly identified the basics were all correct, you were assigned an IP address from the BT WiFi / BT OpenZone hotpot and it intercepted your web request and tried to forward you to the web-based login form (https://www.btopenzone.com:8443).

The reason this fails to load is that that OpenWRT doesn't resolve the DNS request for www.btopenzone.com

I am not entirely sure the full details behind this, but OpenWRT is trying to protect you from a DNS rebinding attach (More info: http://www.circleid.com/posts/070809_de … _attacks/)

This protection is set by Network > DHCP and DNS > General Settings > Rebind protection (within LuCI).

You could either disable this  protection, or, possibly better still, you can white-list btwifi.com and btopenzone.com to exclude these domains from the protection. This means you router should always work whether you are accessing the internet via WiFi client mode or the WAN ethernet port.

Hope this helps

Matt

Hi all,

Did you manage to get this to work? I find that I have mixed success: I desabled rebind protection (I use a VPN for security) sometimes openwrt connects (e.g. MacDonalds: it connects and then any openwrt client can access the MacD greetings page accepting their T&C) and sometimes it does not (just don't get a connection at all so no option to even get to the 'accept T&Cs' page).

On a mobile phone, you won't get the wifi logo until you have connected and accepted the network's T&Cs page. On a laptop, you can connect and have to open a browser to connect to the first page. This is the kind of behaviour I am looking for but am struggling to get there...

Herman

The discussion might have continued from here.