Can't install nodogsplash

[TylerCPU]

I can't install nodogsplash iptables-mod-imq kmod-ipt-imq kmod-sched. When I run opkg install nodogsplash iptables-mod-imq kmod-ipt-imq kmod-sched like in episode 1401.1 of hak5 I get this error.

I also ran opkg update.

root@Pineapple:~# opkg install nodogsplash iptables-mod-imq kmod-ipt-imq kmod-sched
Installing nodogsplash (0.9_beta9.9.6-3) to root...
Downloading http://cloud.wifipineapple.com/packages/nodogsplash_0.9_beta9.9.6-3_ar71xx.ipk.
Multiple packages (kmod-ipt-core and kmod-ipt-core) providing same name marked HOLD or PREFER. Using latest.
Unknown package 'iptables-mod-imq'.
Unknown package 'kmod-ipt-imq'.
Installing kmod-sched (3.7.9-1) to root...
Downloading http://cloud.wifipineapple.com/packages/kmod-sched_3.7.9-1_ar71xx.ipk.
Collected errors:
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for nodogsplash:
 *      kernel (= 3.7.9-1-c4fab16d215b37a6ae48bdb4b2322eba) *
 * opkg_install_cmd: Cannot install package nodogsplash.
 * opkg_install_cmd: Cannot install package iptables-mod-imq.
 * opkg_install_cmd: Cannot install package kmod-ipt-imq.
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-sched:
 *      kernel (= 3.7.9-1-c4fab16d215b37a6ae48bdb4b2322eba) *   kernel (= 3.7.9-1-c4fab16d215b37a6ae48bdb4b2322eba) *
 * opkg_install_cmd: Cannot install package kmod-sched.
root@Pineapple:~#

Pineapple firmware 2.7.7 freshly flashed.

Any help is appreciated. Thanks.

Edited February 21, 2013 by TylerCPU

[Mr-Protocol]

I think it is because it's using the pineapple opk and the other packages probably haven't been ported over from openwrt's opk.

[Sebkinne]

I think it is because it's using the pineapple opk and the other packages probably haven't been ported over from openwrt's opk.

Not quite. OpenWRT repositories are slightly out of sync.

We are working on fixing this - soon.

[TylerCPU]

Not quite. OpenWRT repositories are slightly out of sync.

We are working on fixing this - soon.

That's great but in the meantime where can I download these packages? Is it in the openwrt repo? Where do I find it? Darren was able to get it running in episode 1401.1. Thanks.

[Sebkinne]

He got a special firmware from me. I'll see what I can throw together though. Might not be tonight..

[kurtm]

thanks

[TylerCPU]

He got a special firmware from me. I'll see what I can throw together though. Might not be tonight..

I would really appreciate that. Whenever you have time. No rush. I can't wait to play with it. :)

[kurtm]

any news sir? i would really love to play with nodogsplash. thanks!

[Sebkinne]

Soon - we have lots we are working on for the 2.8.0 release.

[telot]

Ooo! It's around 11pm in the UK - Seb, have you had enough pints to start leaking a little preview for us? :D

telot

[TylerCPU]

I upgraded to the 2.8.0 firmware and ran an opkg update. When I try to install the stuff that I listed above this is what I get.

root@Pineapple:/# opkg install nodogsplash iptables-mod-imq kmod-ipt-imq kmod-sc
hed
Package nodogsplash (0.9_beta9.9.6-3) installed in root is up to date.
Unknown package 'iptables-mod-imq'.
Unknown package 'kmod-ipt-imq'.
Package kmod-sched (3.7.9-1) installed in root is up to date.
Collected errors:
 * opkg_install_cmd: Cannot install package iptables-mod-imq.
 * opkg_install_cmd: Cannot install package kmod-ipt-imq.
root@Pineapple:/#

nodogsplash seems to be running. Status here

root@Pineapple:/# ndsctl status
==================
NoDogSplash Status
====
Version: 0.9_beta9.9.6
Uptime: 0d 0h 14m 22s
Gateway Name: NoDogSplash
Managed interface: br-lan
Managed IP range: 0.0.0.0/0
Server listening: 172.16.42.1:2050
Splashpage: /etc/nodogsplash/htdocs/splash.html
Redirect URL: http://www.hak5.org
Traffic control: no
Total download: 0 kByte; avg: 0 kbit/s
Total upload: 0 kByte; avg: 0 kbit/s
====
Client authentications since start: 0
Httpd request threads created/current: 25/0
Current clients: 0
====
Blocked MAC addresses: none
Allowed MAC addresses: N/A
Trusted MAC addresses: none
========
root@Pineapple:/#

I also changed the port uhttpd runs on (port 81 in etc/config/uhttpd) like darren said to do in episode 1401.1. I guess nodogsplash will clash with uhttpd. Two programs running on port 80(not fun). My problem is that I don't have the skull picture like on darrens phone. I get a dog.

.

I don't know what to do. Does this have something to do with the two modules not installing (Unknown package 'iptables-mod-imq'. Unknown package 'kmod-ipt-imq'.) It looks like I can click on the dog picture. Leading here(http://172.16.42.1:2050/nodogsplash_auth/?redir=http://www.hak5.org&tok=eb8d4a10) ,but then it doesn't go to hak5 it just loads for awhile and errors out.

Edited March 4, 2013 by TylerCPU

[TylerCPU]

I took a closer look at the splash.html and fixed it a little like darrens.

<html>

<head>

<title>$gatewayname Entry</title>

<meta HTTP-EQUIV="Pragma" CONTENT="no-cache">

</head>

<body bgcolor="#DDDDDD" text="#000000">

<table border="0" cellpadding="2" cellspacing="0" width="100%">

<tr>

<td align=center>

<!--<h2>$gatewayname</h2> -->

<img src="$imagesdir/scull.png">

<h2>blasdfaskdfjhdjhf</h2>

</td>

</tr>

<tr>

<td align=center height="120">

<!--

A client is authenticated by requesting the page $authtarget.

So, href to it here, with an img or link text the user can click on.

Also, note that any images you reference must reside in the

subdirectory that is the value of $imagesdir (default: "images").

-->

<a href="$authtarget">

<!-- <img src="$imagesdir/wifidog.png" width="71" height="49" border="0"

alt="Click to enter" title="Click to enter"> -->

</a>

</td>

</tr>

</table>

</body>

</html>

but I am still stuck.

Edited March 4, 2013 by TylerCPU

[Sebkinne]

To install nodogsplash just run:

root@Pineapple:~# opkg install nodogsplash
Installing nodogsplash (0.9_beta9.9.6-3) to root...
Downloading http://cloud.wifipineapple.com/packages/2.8.0/nodogsplash_0.9_beta9.9.6-3_ar71xx.ipk.
Configuring nodogsplash.

No need for anything else.

You may want to look at this for configuration. Note that you don't need those kmods - that is for backfire only.

[TylerCPU]

To install nodogsplash just run:

root@Pineapple:~# opkg install nodogsplash
Installing nodogsplash (0.9_beta9.9.6-3) to root...
Downloading http://cloud.wifipineapple.com/packages/2.8.0/nodogsplash_0.9_beta9.9.6-3_ar71xx.ipk.
Configuring nodogsplash.

No need for anything else.

You may want to look at this for configuration. Note that you don't need those kmods - that is for backfire only.

Ok, Thanks. I wanted to create a different network for nodogsplash, but I don't know what to exactly do. I tried tinkering with the network,dhcp,wireless files. I got the second ssid of public-hotspot to work. But I can't get an IP address. It fails. I can connect to my regular ssid of pineapple, but the difference is I get no more internet connection. My setup is ICS with the pineapple. Here are my edited files.

Network

# Copyright © 2006 OpenWrt.org

config interface loopback

option ifname lo

option proto static

option ipaddr 127.0.0.1

option netmask 255.0.0.0

config interface lan

option ifname eth0

option type bridge

option proto static

option ipaddr 172.16.42.1

option netmask 255.255.255.0

option gateway 172.16.42.42

option dns 8.8.8.8

config interface wan

option ifname eth1

option proto dhcp

config switch eth0

option enable_vlan 1

config switch_vlan

option device eth0

option vlan 1

option ports "0 1"

config interface usb

option ifname usb0

option proto dhcp

# added below

config interface wifi

option ifname eth0

option type bridge

option proto static

option ipaddr 172.16.42.1

option netmask 255.255.255.0

option gateway 172.16.42.42

option dns 8.8.8.8

Wireless

config wifi-device radio0

option type mac80211

option channel 11

option hwmode 11ng

option macaddr 00:c0:ca:60:57:4e

option htmode HT20

list ht_capab SHORT-GI-20

list ht_capab SHORT-GI-40

list ht_capab RX-STBC1

list ht_capab DSSS_CCK-40

# REMOVE THIS LINE TO ENABLE WIFI:

#

config wifi-iface

option device radio0

option network lan

option mode ap

option ssid "pineapple 57:4e"

option encryption none

# added below

config 'wifi-iface'

option 'device' 'radio0'

option 'network' 'wifi'

option 'mode' 'ap'

option 'ssid' 'public-hotspot'

option 'encryption' 'none'

DHCP

config 'dnsmasq'

option 'domainneeded' '1'

option 'boguspriv' '1'

option 'filterwin2k' '0'

option 'localise_queries' '1'

option 'rebind_protection' '1'

option 'rebind_localhost' '1'

option 'local' '/lan/'

option 'domain' 'lan'

option 'expandhosts' '1'

option 'nonegcache' '0'

option 'authoritative' '1'

option 'readethers' '1'

option 'leasefile' '/tmp/dhcp.leases'

option 'resolvfile' '/tmp/resolv.conf.auto'

config 'dhcp' 'lan'

option 'interface' 'lan'

option 'start' '100'

option 'limit' '150'

option 'leasetime' '12h'

option 'ignore' '0'

list 'dhcp_option' '3,172.16.42.42'

list 'dhcp_option' '3,172.16.42.1'

list 'dhcp_option' '6,172.16.42.1,8.8.8.8'

list 'dhcp_option' '6,172.16.42.1,208.67.222.222'

#config 'dhcp' 'wan'

# option 'interface' 'wan'

# option 'ignore' '1'

# option 'start' '100'

# option 'limit' '150'

# option 'leasetime' '12h'

# list 'dhcp_option' '3,172.16.42.42'

# list 'dhcp_option' '6,172.16.42.1,8.8.8.8'

# list 'dhcp_option' '6,172.16.42.1,208.67.222.222'

# added below

config 'dhcp' 'wifi'

option 'interface' 'wifi'

option 'start' '100'

option 'limit' '150'

option 'leasetime' '2h'

list 'dhcp_option' '3,172.16.42.42'

list 'dhcp_option' '3,172.16.42.1'

list 'dhcp_option' '6,172.16.42.1,8.8.8.8'

list 'dhcp_option' '6,172.16.42.1,208.67.222.222'

Any help will greatly be appreciated.

Edited March 4, 2013 by TylerCPU

[ravenium]

After some retooling, I think I have it working...sort of. I'm working with a minimally modified configuration in order to troubleshoot, so largely everything should be "stock" in the nodogsplash.conf. When connected to an upstream link (e.g. internet), the setup works perfectly - it redirects to my splash, it (in theory) acknowledges and continues.

However, without any sort of uplink (let's say if you just wanted to fake a portal that would never work for a wireless test of credentials), the router gets stuck resolving DNS names and errors out before it redirects to the portal.

I'm trying to fix this thusly:

-spoof DNS with *.* set to any IP. This doesn't appear to be working, but I might need to reload and try as there might be a caching problem. I may have also forgotten to realize that setting the IP to 172.16.42.1 will result in the device erroring out for the simple fact that it is supposed to rather than redirect for unauthenticated clients. I'll try some other IP next and see what happens.

I could also just go back to a simple DNS spoofing with the stock landing phishing page, but this feels far less comprehensive (and wouldn't work for cached DNS entries anyhow). Thoughts?