Community discussions

 
jansonz
just joined
Topic Author
Posts: 3
Joined: Mon Dec 04, 2006 10:48 am
Location: Latvia

Client redirect to a web page

Mon Dec 04, 2006 6:06 pm

Hello,
I have problems to redirect non-paying clients to warning web page. I made dst-nat rule, but it wont redirect. Ok, clients do not have Internet enymore, but they don't see the warning. My rule:
chain=dstnat src-address=80.x.x.x protocol=tcp action=dst-nat
to-addresses=80.x.x.y to-ports=8001

Where could be problem?? I also tried to put in the rule dst-port=80, but no changes.. :?:
 
cmit
Forum Guru
Forum Guru
Posts: 1552
Joined: Fri May 28, 2004 12:49 pm
Location: Germany

Tue Dec 05, 2006 9:17 am

Make that a
chain=dstnat src-address=80.x.x.x protocol=tcp dst-port=80 action=dst-nat to-addresses=80.x.x.y to-ports=8001 
(include the dst-port paramter) or your webserver will see all kinds of TCP traffic redirected to it which it cannot really handle (SMTP, FTP, ...).

If you made sure you have a webserver running on port 8001 at the address you redirect to, also take care to configure it so every errorpage (especially the 404 one) will show your "we're missing money from you"-page. (As your client will perhaps request http://www.someaddress.com/this/other/page.html - and your webserver won't have that special file...)

If that doesn't work, try to explain better what acutally happens ("it won't redirect, but they do not have internet"?).


Best regards,
Christian Meis
 
datawlan
newbie
Posts: 29
Joined: Mon Aug 28, 2006 11:15 pm
Contact:

question

Wed Dec 20, 2006 1:30 pm

Hi Cmit!

Yes, that is a good example.

For this reason I have to "run" an another server, just to be able to display the "PAY PLEASE" site?

Is it possible to redirect all port "80" requests to not an IP address, but a site (for.e.: http://www.WISP.com/nopay.html)?


Thanks a lot.
 
datawlan
newbie
Posts: 29
Joined: Mon Aug 28, 2006 11:15 pm
Contact:

question

Wed Dec 20, 2006 1:30 pm

Hi Cmit!

Yes, that is a good example.

For this reason I have to "run" an another server, just to be able to display the "PAY PLEASE" site?

Is it possible to redirect all port "80" requests to not an IP address, but a site (for.e.: http://www.WISP.com/nopay.html)?


Thanks a lot.
 
titius
Member
Member
Posts: 338
Joined: Mon Oct 17, 2005 11:43 am
Location: Titel Serbia

Wed Dec 20, 2006 7:24 pm

no you cant redirect to a web page just IP address, but you can make virtual web server on another port for examle http://ipaddress:81
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6616
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Thu Dec 21, 2006 10:41 am

Redirection to domain address is also possible, but then transparent proxy should be enabled (web-proxy test package). 80 port number requests will be maintained by the proxy, but web-proxy test package access-list contains 'redirect-to' option, that might be used to redirect required requrest to the specific web-page.
 
datawlan
newbie
Posts: 29
Joined: Mon Aug 28, 2006 11:15 pm
Contact:

Thu Dec 21, 2006 10:52 am

Thanks, guys, both solutions are perfect!

I guess making a virtual server is easier (especially for a newbie).
 
datawlan
newbie
Posts: 29
Joined: Mon Aug 28, 2006 11:15 pm
Contact:

hmmm

Thu Dec 21, 2006 1:25 pm

Hi!

I've made a virtual server, which works perfect (from browser).

For some reason, this code below does not direct the SELECTED client to the right address.

chain=dstnat src-address=192.168.121.37/32 protocol=tcp dst-port=80 action=dst-nat to-addresses=80.64.x.y to-ports=81

It should be ok, or?


Many thanks

Datawlan
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6616
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Thu Dec 21, 2006 1:39 pm

Connection tracking has to be enabled on the router.
Make sure there are not any other NAT rules before this one.
 
datawlan
newbie
Posts: 29
Joined: Mon Aug 28, 2006 11:15 pm
Contact:

Thu Dec 21, 2006 11:08 pm

Connection tracking has to be enabled on the router.
Make sure there are not any other NAT rules before this one.
Yes, It is on - and it works now!

Thanks for the help!
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6616
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Fri Dec 22, 2006 8:48 am

datawlan
Where was the problem, when previously it does not work correctly ?
 
datawlan
newbie
Posts: 29
Joined: Mon Aug 28, 2006 11:15 pm
Contact:

Sat Dec 23, 2006 6:41 pm

datawlan
Where was the problem, when previously it does not work correctly ?
hmm..

There was another rule just before this dst-nat.

It was my mistake.

Regards

Who is online

Users browsing this forum: No registered users and 19 guests