[sweetspot-users] Apache server on OUTSIDE interface

[Robert L. <dar...@gm...>]

Hello,

   We are making great progress with our SweetSpot server.  We are
experiencing troubles running our Apache Capture Portal on the same machine
as the SweetSpot server.  It seems this has come up before in the past, and
the trouble was over come by some.

  I was hoping there would be an easy solution for this, or something in the
road map for SweetSpot. We are able to DNAT to any server OUTSIDE of the
SweetSpot server, but we are unable to DNAT to even the outside interface of
the SweetSpot server.

UAM Works awesome, and we can surf to the login page from the clients if we
type the address in directly.

////OUR FILTER FOR TESTING:
# DNS loophole
pass in proto udp to 64.212.106.84 port eq 53
pass out proto udp from 64.212.106.84 port eq 53

 dnat HTTP
dnat in proto tcp to port eq 80 redir to 172.16.10.9 port 80
dnat out proto tcp from 172.16.10.9 port eq 80

# no connectivity beyond this point
pass in
pass out

////END OF FILTER

///CONFIG FILE
# Sweetspot daemon configuration

# inner interface name (which is close to users)
inner-interface eth0

# outer interface name (which is close to Internet)
outer-interface eth1

# user IP CIDR (addresses anyhow assigned to user computers)
#user-networks 127.0.0.0
user-networks 172.31.18.0/27, 172.31.18.64/27, 172.31.18.32/27

# SNAT public networks
snat-public-networks 172.16.10.10

# authentication server address
uam-server-address 127.0.0.1

# authentication server port
uam-server-port 3993

# authentication server shared secret (auth client must have the same)
#uam-secret n0m0n3yn0hun3y

# report UAM errors back to client (obsolete)
#uam-report-errors 1

# Detail file accounting
acct-detail-file /var/sweetspot/detail

# Interim accounting interval (in secs)
#acct-interim-interval 300

# NAS-IP-Address to report in acct detail file
acct-nas-ip-address 127.0.0.1

# Packet filters directory
filter-dir /usr/local/etc/sweetspot/filters

# Captive filter
filter-anonymous anonymous

///END OF CONFIG FILE

Thanks for any help you can provide,

Robert Lupinek