Mamak Spot

Mamakspot 3 Screenshots

2009-05-14T00:02:00.003+08:00

Captive Portal WYSWYG Editor

Location Map on Captive Portal

Captive Portal Editor

Response to your hotspot requests using live chat

The chatbox in the captive portal

Prepaid Editor

Prepaid Manager login page

MamakSpot Version 3

2009-05-05T16:16:00.001+08:00

I've started mamakspot version 3 development.

http://mamakspot.my/index.php/topic,37.0.html

cacti & TrafIP is up

2008-11-18T07:56:00.002+08:00

cacti Report on bandwidth usage @ Wireless 1 AP

IPtables - PHP report on gateway bandwidth usage

Planned extra Features for V2

2008-11-17T08:52:00.004+08:00

1. Reporting on successful login and logout
2. User request form
3. Admin disconnect online user
4. Ajax interval 10 secs to show overall download and upload in MB 5. Simple bandwidth graph

1. Reporting on successful login and logout
Have to create a table dedicated for logging successful logging and logout, so in the report it display like below

10.0.0.2 logged in using xxxxx username at 10.20pm 12th December 2008
10.0.0.50 logged in using xxxxx username at 11.20pm 12th December 2008

2. User request form
Regiestered user can request XS Code by filling the form to the Admin, admin will be notified by email and will check request . A request is a discussion between admin and user. Have to use 2 tables until the request is marked done by the admin. Can use blog topic , blog commenst db structure.

3. Admin disconnect online user
Admin can disconnect particular user by putting Max-All-Session = 0 into user's radcheck table. The connected user will be disconnected after radius interval check.

4. Ajax interval 10 secs to show overall download and upload in MB
Admin can view the concurrent usage by number of up/down bandwidth used

5. Simple Bandwidth Graph
Using IPtraf script to generate bandwidth graph.

Online Users

2008-11-16T21:15:00.002+08:00

I've written a module to show online users.

I know that my maximum idle for every users is 300secs or 5 minutes.
So I can check againts radius.acctstoptime field == null in SQL.

If use disconnected without logging out, radius will disconnect them after idling more than 5 minutes.

MamakSpot V2 on VMWARE

2008-11-15T18:46:00.005+08:00

From left: Win Xp running VMWARE as MamakSpot Server, Laptop simulating as wireless client

Host Ap connected directly to ETh0 and Ap2 connected to AP 1 using WDS link ( wirelessly )

AP1 ( host ), Ap2 ( WDS Client )..look..no AP 2 connect wirelessly

Wifi AP System Status

DHCP Status received by Mamakspot client

Connection status for client at Mamakspot landing page

Wireless Distribution System Status

VMWARE control panel

Running tcpdump on VMWARE

Host PC : Windows XP pro with 2 NIC
VMWARE : Redhat Linux EL5 Console Edition running MamakSpot V2
Gateway Server : 192.168.1.1 ( router modem )
VMWARE MAMAKSPOT ; 192.168.1.2, 10.0.0.1
Linksys AP 1 : 10.0.0.254
Linksys AP 2 : 10.0.0.253
Client PC : DHCP
DNS Server : Public Open DNS Server

Planned
1. Squid cache server running on transparent network

Writing blog engine @ Mamak stall

2008-11-14T08:43:00.004+08:00

The controller

The add new post

The blog index

I left the office at 5.30pm and arrive at my wife's office area arounf 6pm, then she informed me that she will be late. Luckily there's a mamak stall nearby. I ordered a Roti Telur and Teh Tarik ( typical Malaysian fast food ) and turn on my Laptop.

Okay, to kill the time ahead of me, I'll will write a blog system for my Mamak Spot Wifi Controller. Fired up Firefox and pointed to PhpMyAdmin installed locally on my pc.

So I create a blog_posts table consists of
1. id
2. title
3. body
4. created
5. modified

Then I create my BlogPost model in /app/model as blog_post.php.

Notice that I use $scaffold in the controller. Then I point to http://localhost/blog_posts and tadaaa, the basic CRUD interface is there. But I need to customize the index layout, so that it will bring a basic blog interface. So I have to create a folder inside /views as blog_posts and create a new file named index.ctp

Save the file, refresh the browser. Tadaaa, a nice blog interface.

The phone rang again, okay, time to pickup my wife and I manage to kill my 1 hour waiting by writing a simple blog complete with CRUD functions.

Usage report for each user

2008-11-12T22:20:00.002+08:00

At least you can know which user is heavy downloader

DD-WRT V24 SP2 Repeater Mode

2008-11-12T21:52:00.002+08:00

Host AP : Linksys WRT54GL running CoovaAP
Repeater AP : Linksys WRT54GL running DD-WRT V24 SP2

I put the host AP in the kitchen and repeater AP in the main hall. The repeater AP actually repeat the Host's AP SSID and I can connect to the net with excellent strength.

I think , I'll use repeater mode for easy deployment.

WDS vs Repeater vs Repeater Bridge

2008-11-12T09:09:00.002+08:00

http://www.dd-wrt.com/wiki/index.php/Repeating_Mode_Comparisons

At home , I run 2 unit Linksys WRT54GL 1.1 with WDS mode between them. Have been running for months without switching off,and no visible performance drop at all.

For low cost 'MESH', WDS is way to go. Repeater/RB will cost more 'resource' and you will have more control in WDS mode.

External Radius test with PDRNET

2008-11-11T16:01:00.001+08:00

Me and Azmi Hamzah did a simple eternal radius test. He used his Pfsense box to test radius auth over my radius server at home connected by Streamyx broadband. It works !

ICT Funds Needed !

2008-11-10T15:37:00.004+08:00

This development costs time and money. Luckily, I am the only one who develops this so, become a Jack Of All Trades is not good for your health.

To built Mamakspot in full scale, you'll need

1. PHP Programmer ( CakePHP 1.2 knowledge )
2. Database Administrator ( MySQL )
3. Radius Engineer ( Free Radius )
4. UI engineer ( Ajax,Javascript )
5. Web Designer ( Web 2.0, CSS,HTML )
6. Linux System Admin ( LAMP Deployment , Firewall)
7. Network Engineer ( LAN,WAN )
8. Wifi Network Engineer ( Mesh,WDS,Firmware,Network )
9. Security Engineer ( Web App Security, DDOS,Server Patches, Firewall )
10. Technical Writer ( documentation,manual, proposals )
11. Web Marketing ( SEO,PPC,Keyword )
12. Sales ( the most important job, selling the product )
13. Support Engineer ( Installer, Troubleshooting, Helpdesk )
14. Project Manager & Technical Lead ( the roadmap for future version )

Ok, now I can create 15 jobs including me, each of them will cost me RM5k per month.

So, goverment...please help me :)

CoovaAP and Freeradius

2008-11-10T11:06:00.000+08:00

I have the same problem by the user mentioned here -> http://coova.org/phpBB3/viewtopic.php?f=3&t=393

Connect Status

2008-11-09T20:15:00.002+08:00

To present a simple status after user connected to the net, the coding in the bakground is not easy. I have to talk with 2 databases ( radius and mamakspot ) and user 5 tables.

User can see their current status like
1. total bandwidth used
2. time to expire
3. minutes assigned ( prepaid )
4. minutes left ( prepaid )
5. total time used

The default Coova JSON interface also used in the status page. Here the screenshot

NAS Box Controller

2008-11-09T03:58:00.003+08:00

Nas table structure in MySQL

Nas Controller in mamakspot

Using CakePHP scaffolding magic, I write this simple application to manage my NAS box. Quite handy if you want to add/remove wifi AP. Perhaps in the future I'll add the longtitude/lattitude column and I can track all the NAS using Google Map

This features can be extended
1. Have a nas_profile table for each nas inserted here
2. lattitude & longitude for the nas box
3. built a page showing history of user connected to particular nas
4. Google map widget to show the nas location in the country

Usage Report per User

2008-11-09T03:57:00.003+08:00

Now I can track every user's usage and DENY access if their usage way too high

Bug Squashing Day

2008-11-08T20:31:00.002+08:00

Bugs
1.Each user will have multiple radacct sessions but in admin panel, it only show one.Seems like CakePHP model relation not working, so I use RequestAction to get lists of radacct sessions using username.

2. WISPr doesn't accept integer like 512.2222, so I have use php function round()

How do I solve dynamic ip NAS in Freeradius ?

2008-11-07T13:40:00.002+08:00

Free radius reloading, new setting and reading NAS information for Radius.nas table

The NAS table in MySQL

Traditionally, we will use clients.conf for NAS lists control. But what if, your NAS is using dynamic ip address ?

Imagine the scenario

1. You Radius server hosted in datacenter at radius.yourdomain.com
2. You have 100 of wireless AP that scattered around the country.
3.Each time the AP dies, ISP will provide them with dynamic IP
4. How to tell radius, each AP new ip address so that users connected to the Ap can authenticate with radius server ?

Solution
1. Use Nas MySQL option, turn on readclients = yes in sql.conf
2. Write a simple cron job to update NAS IP every 10 minutes
3. Use http $_GET to retrieve nas informations in the radius server and update the mysql.Each nas will have different nas-secret.
4. Set the radius server to reread configuration when there's in update on nas table.
5. Problem solved

Radius @ Work

2008-11-07T09:40:00.003+08:00

Fired up Ubuntu mahchine and tried to do simple radtest check over my radius server at home from my office.

In my home's firewall, I've set all these credentials

ALLOW 1812 TCP DEST 192.168.1.5

ALLOW 1813 TCP DEST 192.168.1.5

ALLOW 1814 TCP DEST 192.168.1.5

But it failed. Maybe I should use UDP instead of TCP.

Here is some screenshots

Ajax Updated

2008-11-06T18:12:00.002+08:00

If admin set the time expiration, and choose date, the Ajax will auto calculate the date in readble format.

White Russian: Coova AP flashed into my Linksys WRT54GL

2008-11-06T13:37:00.002+08:00

The info page

First time boot

Downloaded the image file, 2.5MB from Coova.org

Upload the bin file into Linksys original firmware -> upgrade firmware

Took 5 minutes to upgrade

Turn off the AP for 1-2 minutes

Turn on back and Coova AP already in action

A little bit of Ajax

2008-11-06T12:57:00.002+08:00

I've tested Meraki Hotspot controle panel yesterday and they used Ajax slider to set the user upload and download bandwidth speed. Quite a handy function.

Since I'm using CakePHP 1.2 and Prototype Ajax already built in, I've changed the form interface. See the screenshot.

Planning to flash my firmware to Coova AP

2008-11-06T07:58:00.002+08:00

I've been fan of DDWRT for a long time, but now it is time to embrace the new world

http://coova.org/wiki/index.php/CoovaAP/InstallFAQ

Registered Users Access Module

2008-11-06T00:59:00.003+08:00

Granted user can see his Internet Access Code. Simply copy and paste the code

The login form

Registered users. admin can grant selected users

Grant the user for internet use
- can set expiration time
- can set max upload speed
- can set max download speed

Admin can see connected users Internet Session

12.59am, spent almost 6 hours finishing the XS Module for registered users.

here are the screenshots

Planning for MamakSpot FreeWifi With Ad

2008-11-05T13:47:00.004+08:00

WISPr-Redirection-URL := "http://10.0.0.1/advertisements"
Idle-Timeout := 600
Session-Timeout = 3600

I'm planning to do simple test where user can user my free wifi service, no subscriptions, no prepaid, simple press Connect Button and off you go.

Well , there's a catch. Every 600 secs or 5 minutes, they will be redirected to my own Advertisement page where I can simply run

1. Advertisement engine , to force free wifi user see the latest ad
2. Google Adsense Pay Per Click
3. Ad Rotating banner displaying products of my Advertisement clients

And use a javascript to show CONTINUE button after the user see the Ad for 10 secs
So, no body lose

I can get money from running ads, and my users can surf the net for free.

How to limit total bandwidth used by your radius users ?

2008-11-05T09:39:00.003+08:00

http://coova.org/phpBB3/viewtopic.php?f=4&t=343&st=0&sk=t&sd=a

Mamakspot V2 Prepaid

2008-11-05T09:28:00.002+08:00

Slept at 1am last night to finish Add Prepaid module.

Add Prepaid Module
---------------------------
1. Accessible only to Admin usergroup ,else redirect to error page
2. Admin can choose how many prepaid he want to generate ( limit at 10 )
3. Admin can choose download speed ( 56k - 1024k )
4. Admin can choose upload speed ( 56k - 1024k )
5. Admin can choose max hours ( Max-All-Sessions )

The generated prepaid will be displayed in
1.Prepaid For Sales in Prepaid Management Tab
2.Buy Prepaid in user's My Prepaid tab

When logged user click Buy Prepaid, an indication will be displayed on Admin ( or maybe I'll write a simple notification ) that somebody interested to buy the generated Prepaid.

Then the user pay the price, Admin simply edit the owner of the generated prepaid.

Then in user's My Prepaid tab, the newly bought prepaid will be displayed with full prepaid code

User then, copy the code and paste into Connect tab

User can surf the net

Prepaid Management Module

2008-11-04T17:33:00.002+08:00

Prepaid session usage detail

Prepaid usage detail ( how many time the same prepaid being used )

List of sold prepaids

Add/Edit Form. Still need more development on this

List of created prepaid. Will be tagged for sales

Prepaid Mode

2008-11-03T16:58:00.002+08:00

In Prepaid Mode

1. Admin can generate Prepaid with custom setting, example

512kbps Upload Speed
1024 kbps Download Speed
1 hour usage

And admin can generate 10 prepaids using same setting

The generated prepaid can be printed and sell like normal mobile phone prepaid.

Or

It can be displayed in Prepaid For Sales section and user can straight away buy the web

Mamakspot V2 Screenshot

2008-11-02T23:45:00.003+08:00

Paid prepaid will be shown . User must copy the code and paste into prepaid form in Connect section

Admin will create the prepaid for sales, different upload/download speed, different online hours. User simple click buy the desired prepaid. Admin will update the prepaid owner into paid user.

The JSON radius info after user connected to the NET. Wrapped into cakephp custom page

List of newly created prepaid for sales by admin

coova config

2008-11-02T12:21:00.001+08:00

[code]
# HotSpot settings for simple Captive Portal
#
HS_NASID=mamakspot01
#HS_UAMSECRET=snadi-tech
HS_RADIUS=127.0.0.1
#HS_RADIUS2=rad01.coova.org
HS_RADSECRET=snadi-tech
HS_UAMALLOW=google.com

# Put entire domains in the walled-garden with DNS inspection
HS_UAMDOMAINS=".google.com,.yahoo.com"

# Optional initial redirect and RADIUS settings
# HS_SSID= # To send to the captive portal
# HS_NASMAC= # To explicitly set Called-Station-Id
# HS_NASIP= # To explicitly set NAS-IP-Address

# The server to be used in combination with HS_UAMFORMAT to
# create the final chilli 'uamserver' url configuration.
HS_UAMSERVER=10.0.0.1
#HS_UAMSERVER=http://10.0.0.1/hotspotlogin.php

# Use HS_UAMFORMAT to define the actual captive portal url.
# Shell variable replacement takes place when evaluated, so here
# HS_UAMSERVER is escaped and later replaced by the pre-defined
# HS_UAMSERVER to form the actual "--uamserver" option in chilli.
#HS_UAMFORMAT=https://\$HS_UAMSERVER/uam
HS_UAMFORMAT=https://\$HS_UAMSERVER/cgi-bin/hotspotlogin.php

# Same principal goes for HS_UAMHOMEPAGE.
HS_UAMHOMEPAGE=http://\$HS_UAMLISTEN:\$HS_UAMPORT/www/coova.html

# This option will be configured to be the WISPr LoginURL as well
# as provide "uamService" to the ChilliController. The UAM Service is
# described in: http://coova.org/wiki/index.php/CoovaChilli/UAMService
#
#HS_UAMSERVICE=https://coova.org/app/uam/auth
#HS_UAMSERVICE=https://10.0.0.1/uam/auth
HS_UAMSERVICE=https://10.0.0.1/cgi-bin/hotspotlogin.php
[/code]

Radius Scaffold demo using CakePHP

2008-11-02T11:58:00.003+08:00

Adding attributes into RadCheck table

The radiusd -X results

List of attributes added into radcheck

Snadi Tech SDN BHD kini rakan kongsi MamakSpot

2008-11-01T17:02:00.004+08:00

Server di atas adalah ehsan Snadi Tech SDn BHD untuk meneruskan development MamakSpot. Sila lawati website mereka di http://www.renjisrenjis.com/joomlatemp/index.php

Snadi Tech juga sedang mencari PHP Programmer ( permulaan ) untuk bekerja dengan mereka untuk develop aplikasi MamakSpot version 2 menggunakan CakePHP 1.2 sebagai framework di bawah seliaaan saya. Sila pergi ke laman web mereka dan hubungi mereka mengenai jawatan programmer

MamakSpot 2 Dev Server

2008-11-01T16:58:00.001+08:00

Mamak Spot masuk Kosmo

2008-09-05T12:33:00.001+08:00

Terima kasih kepada Khairul@Kosmo yang sudi mereview produk MamakSpot. Tanggal 4 September 2008, MamakSpot telah direview oleh Utusan Kosmo dalam ruangan Infiniti.

URL : http://kosmo.com.my/kosmo/content.asp?y=2008&dt=0904&pub=Kosmo&sec=Infiniti&pg=in_03.htm

Sila tanya soalan di.....

2008-08-08T11:46:00.001+08:00

http://progold.biz/board/22

Jika ada persoalan, tanya sahaja di sana. Saya akan mencuba untuk menjawab permasalahan anda.

Video Belajar PHP

2008-08-05T17:41:00.002+08:00

Minat belajar coding PHP, sila lawati laman video PHP saya di http://php-video.blogspot.com

Video tutorial Permulaan CakePHP 1.2 Secara Mudah dalam proses pembikinan. Jika anda minat coding PHP secara teratur dan kemas, gunakan CakePHP.org

Video Tutorial: Install Ubuntu dalam VMWARE

2008-07-28T14:54:00.003+08:00

Saksikan bagaimana saya install Ubuntu 8.04 Desktop edition di dalam Windows Vista menggunakan VMWARE 1.06

MySQL Master Slave Problem

2008-07-23T11:34:00.001+08:00

Semasa buat freelance MySQL Master - Slave Replication, guna MySQL 5, ada problem kat slave. Even aku dah set username dan password dalam /etc/my.cnf dalam slave server, mysql masih nak guna default test@localhost connect ke Master server. SO kena ubah manually dalam MySQL Console

In the next command (still on the MySQL shell) you have to replace the values appropriately:
CHANGE MASTER TO MASTER_HOST='192.36.253.29', MASTER_USER='root', MASTER_PASSWORD=' ', MASTER_LOG_FILE='mysql-bin.006', MASTER_LOG_POS=183;

VMWARE dan kegunaannya

2008-07-22T09:08:00.002+08:00

VMWARE Server yang saya gunakan dalam tutorial MamakSpot, adalah dari versi percuma yang boleh didapati di alamat berikut http://vmware.com/download/server/. Disebabkan saya mempunyai PC yang terhad, jadi saya gunakan penyelesaian dari VMWARE untuk membuat server virtualization di mana di dalam Windows XP saya, boleh running Linux Redhat Mamakspot, Linux Redhat Cache Server, Linux Redhat, Database server dan sebagainya.

Jadi saya boleh membuat simulation server farm sendiri untuk tujuan demo.

Contohnya

192.168.1.10 = Host Windows XP Pro
192.168.1.2 = Linux Redhat running Mamakspot
192.168.1.3 = Linux Ubuntu Server running LAMP server
192.168.1.4 = Linux Redhat Samba Server
192.168.1.5 = Windows Server 2003

Jadi, dengan menggunakan 1 PC, saya boleh mempunyai banyak 'virtual servers' dan boleh melakukan testing dan setup tanpa menggunakan kos yang tinggi.

Sila download VMWARE Server versi terkini, 1.06 di http://vmware.com/download/server/

Video Tutorial : Mamakspot Running on Windows XP

2008-07-21T08:47:00.003+08:00

Video untuk setup Mamakspot di dalam persekitaran Windows XP. Pastikan anda mempunyai Flash player untuk mengikuti tutorial di bawah.

Tutorial 1 ( Setting VMWARE Redhat EL5 dalam Win XP )
Tutorial 2 ( Setting VMWARE Networking VMWARE )
Tutorial 3 ( Menjadikan Redhat EL5 sebagai router )
Tutorial 4 ( Setting FreeRadius & MySQL )
Tutorial 5 ( Setting Max-All-Session FreeRadius )
Tutorial 6 ( Setting Coova Chilli + FreeRadius + MySQL )
Tutorial 7 ( Mencuba login ke internet dari client ETH1 )
Tutorial 8 ( Install Script MamakSpot )

( Save Target As )

Code yang digunakan dalam tutorial.

Video Mamakspot Setup & Configuration

2008-07-20T22:46:00.002+08:00

Saya telah berjaya setting Mamakspot For Windows. Image file mamakspot.vmdk bersaiz dalam 4GB. Image ini boleh terus run di dalam environment Windows dengan menggunakan server VMWARE 1.06 yang boleh didapati dengan percuma.

Saya juga telah menyiapkan 9 video tutorial yang bersaiz 1GB keseluruhannya dalam bentuk AVI. Video tersebut akan mengajar anda install dan setup server mamakspot menggunakan platform Redhat Linux EL5.

Jadi sekarang saya sedang memikirkan di mana untuk host file-file tersebut

Gambar hardware yang digunakan Mamakspot For Windows

2008-07-20T17:57:00.002+08:00

Untuk projek terbaru saya ini, PC di sebelah kanan adalah server mamakspot. Menggunakan OS windows Xp sebagai host dan Redhat Linux EL4 adalah VMWARE client. laptop di sebelah kiri pula digunakan sebagai client untuk mamakspot. Laptop menggunakan Ubuntu Desktop 9.03 yang disambung terus ke network card #2 PC.

klik rajah di atas untuk layout kasar

Contoh Setting VMWARE 1.06

2008-07-20T17:35:00.005+08:00

Nota kaki
--------------
Untuk mengikuti tutorial ini, anda perlu berjaya install Linux Redhat EL5 di dalam VMWARE 1.06 yang dihost di dalam Windows XP. Network setting dalam Linux EL5 adalah seperti berikut

ETH0 :
IP addr :192.168.1.2
Netmask : 255.255.255.0

ETH1
IP addr: 10.0.0.1
netmask: 255.255.255.0

Pengetahuan asas menggunakan VMWARE server 1.06 juga diperlukan terutama dalam setting virtual network. Saya gunakan konsep bridging dahulu.

Network card #1 diset sebagai vmnet0 dan network card #2 diset sebagai vmnet2

Boot Linux Redhat EL5 dalam VMWARE server dan ping kepada laptop yang menggunakan alamat 10.0.0.2 yang diconnect directly dari network card #2.

Nota kaki:
1. Laptop yang connected ke 10.0.0.1, pastikan setting ip address ke alamat 10.0.0.2, netmask 255.255.255.0, DNS 202.188.1.5 dan paling penting gateway 10.0.0.1 dahulu. Ini penting untuk ujian pertama iaitu menjadikan mamakspot sebagai router dahulu.

Video ini menunjukkan setting VMWARE dan juga setting network Redhat Linux EL5

Mamakspot for Windows

2008-07-20T11:43:00.004+08:00

Nak guna Mamakspot dalam Windows XP ?

Senario
Anda mempunyai 1 PC yang ada 2 network card dan ingin menggunakan Windows XP sebagai server untuk menguji Mamakspot.

Bahan-bahan
--------------------------------
PC yang ada 2 network card
Network Card 1 connected to modem streamyx
IP address : 192.168.1.2
Netmask: 255.255.255.0
DNS : 202.188.1.5
Gateway: 192.168.1.1 ( modem streamyx )

Network Card 2 pula connect kepada client untuk Wifi

Nota kaki:
1. Redhat EL 5 ISO tak jumpa SCSI HDD dalam VMWARE, jadi kena re-create kembali Virtual VMWARE HDD guna option IDE. Saya gunakan saiz 4GB

2. PC saya ada 2 physical network card. Kena tambah network car no2 di dalam VMWare server

New Project : Mamakspot + Redhat EL5 Server + VMware + windows Xp

2008-07-16T18:42:00.003+08:00

Ingredients:
1. Redhat Linux El5
2. VMware Server 1.06
3. Windows XP Host machine
4. 2 physical network card

Saya mempunyai DVD original Redhat Linux EL5. Saya hanya perlukan iso dvd tersebut. Command yang saya gunakan untuk hasilkan image iso dari dvd ialah


dd if=/dev/dvd of=/root/dvd.iso

Image yang terhasil bersaiz 2.7GB. Kemudian saya transfer image ISO tersebut ke dalam Windows Xp menggunakan ftp. VMWARE 1.06 akan diset untuk boot image ini menggantikan CDROM.

Mamakspot on Sony Notebook with 1 Network Card

2008-05-28T19:22:00.008+08:00

ETH0 Binding Settings. The above is ETH0 and the below is ETH0:1

AP1, the master AP that gives 192.168.1.X address

AP2, connected to AP1 using WDS as bridge mode

Notebook on the left running Redhat EL5 as MamakSpot Server and Notebook on the right, running MS Vista as Mamakspot client.

AP2 + Server + Client all connected to the same hub

Side view

Default Coova Login Page on 2nd Laptop

The JSON User Status

Redhat EL5 default interface

ifconfig -a screenshot ( notice the eth0:1 interface )

route.sh firewall script modification

Radius working in harmony using 1 radius account.

It works !
Operating system : Redhat Linux EL5
Captive Portal : Coova Chilli
Wifi Controller : MamakSpot
Radius Server : FreeRadius
Database Server: MySQL
Web Server : Apache

Settings
ETH0 received ip via DHCP in 192.168.1.X range
ETH0:1 is virtual 2nd network card and basically serving its own DHCP ip in 10.0.0.X range

Modifications from original Mamakspot Setting
1. Use IP Binding to create ETH0:1 which is mapped to 10.0.0.1
2. Some minor modification on route.sh to reflect ETH0:1

Here's the scenario
1. AP1 will connected to AP2 via WDS.
2. AP1 is main DHCP server for 192.168.1.X range
3. Anything that connected to AP2 using LAN port will get DHCP ip from AP1
4. In this case, Sony Laptop Redhat El5 server get its own ip, 192.168.1.53 from AP1 ( even connected to AP2 since I set the AP just to run in bridge mode only )
5. Sony Laptop NIC will be connected to normal HUB. A CAT5 cable also connected to the HUB to AP2.
6. Client, Sony Laptop 2 will get DHCP using wired LAN from ETH0:1 interface
7. Client will be presented by Coova Login Page before he can proceed to surf the internet.

Just put any bridge mode wireless AP that points to 10.0.0.1, a wireless network can be created. In this simulation, I'm using wired LAN.

MamakSpot Install & Setup Service

2008-05-22T10:19:00.003+08:00

If you interested to have your own MamakSpot system, I can do the installation & configuration

The price is RM500.00 for server setup, that includes :

1. Complete configuration and setup of MamakSpot
2. System test using wireless AP and wired connections

Interested ? What I need is
A pc with :
1. 2 network cards
2. cdrom / dvdrom
3. Hard disk

And also your own AP for testing purposes.

What you get is :
1. Mamakspot system with source code
2. Free updates on MamakSpot Software
3. Troubleshoot help.

Call me at 014 6412 911 ( Azril Nazli Alias ) for more info. azril.nazli@gmail.com for email
* time needed is 1 week after delivery
* payment can be made after system test by cash only or Maybank 2u transfer
* I can pickup the pc in Putrajaya area / Shah Alam / Serdang or come to Putrajaya.

IP 2 Location using Google Map

2008-04-28T10:34:00.003+08:00

PHP Code to retrieve the Longitude and Latitude for given IP Address

IP 2 Loc hosted at http://ad.protonmania.com

After saw the Ajax Powered IP to Location finder by Seomoz , I've decided to dig the net on how to do that using CakePHP .

Basically , I'll get the IP given by the user via $_POST or $_GET, filter it and try to get the longitude and latitude value from 3rd party site, in this case I'm using http://netgeo.caida.org/

Example http://netgeo.caida.org/perl/netgeo.cgi?target=202.188.1.5
Then filter the result, do some PHP coding and only get the Latitude and Longitude.

Pass that value to Google Map engine, and voila.

Reference URL
CakePHP = http://cakephp.org
Google Map Account = http://code.google.com/apis/maps/signup.html
CakePHP - Google Map Tutorial = http://bakery.cakephp.org/articles/view/adding-a-google-map-to-your-app

Example : http://ad.protonmania.com/ip2loc

Siaran tergendala : ad.protonmania.com

2008-04-25T01:19:00.003+08:00

Clone Mudah.com.my, tapi tak siap lagi. 2 hari coding guna Cakephp 1.19. Dah mahir Cakephp 12 nanti, saya akan sambung development untuk mamakspot.

Sebelum itu, mari cuba testdrive applikasi baru saya ini

http://ad.protonmania.com

Registration Module

2008-04-20T11:37:00.003+08:00

User Controller

User Model

User View

I done it using CakePHP 1.2
Very basic user registration.
The flow
1. User register by entering username & password
2. System will check for duplicate username
3. After logged in user will be needed to complete some information
4. User choose type of subscription
5. User add mobile phone number
6. User complete his profile
7. List of subscriptions status

CakePHP 1.2 Dev Update

2008-04-19T12:32:00.002+08:00

1. Dowonloaded CakePHP 1.2 beta from CakePHP.org

2. Edit apache httpd.conf to enable .htaccess parsing

3. CakePHP installed on /var/www/html/cake

4. Database configured,chmod 777 APP/tmp and APP/cache folder

5. Design database in process

CakePHP Model

-------------------------------------

radusers = hasMany tables

radprofiles = belongsTo radusers

radcheck = belongsTo radusers

6.Added user_id field to radcheck table

7.Writing Model/View/Controller for user registration

User Requirement Spec

2008-04-17T14:41:00.003+08:00

I need code rewriting and these is in my heads

Admin Panel
- add user
- edit user
- delete user
- activate user
- deactivate user
- view usage status
- disconnect user
- set maximum download/upload speed
- set maximum bandwidth usage
- view current online users
- view overall statistics
- auto generate user on the fly based on hour ( username + password )

User
- registration module
- user management module
- view prepaid balance
- buy new prepaid

Registration Mode / User Groups
- prepaid mode
- postpaid mode
- by number of days/months mode
- by bandwidth mode

MamakSpot : Pembangunan Software

2008-04-17T08:31:00.002+08:00

Saya telah selesai membuat tutorial untuk membina MamakSpot dari 1 hingga 5. Peringkat seterusnya bergantung kepada usaha anda sendiri untuk mempelajari

1. Radius Server
2. Coding PHP/MYSQL

Sehingga ke tahap tutorial 5, anda sudah boleh add/edit/delete user menggunakan MySQL. Jadi secara tidak langsung anda boleh membuat software sendiri seperti MamakSpot untuk automatekan process tersebut.

Jadi saya akan berhenti membuat tutorial di sini dan akan menumpukan perhatian kepada pembangunan software MamakSpot.

Ubah kepada CakePHP 1.2
Buat masa ini kod PHP MamakSpot ditulis secara ekspres tanya mementingkan soal keselamatan dan future upgrade. Jadi saya akan re-code balik semua code menggunakan PHP FrameWork dari jenis CakePHP . Anda boleh lawati laman web mereka di http://www.cakephp.org

Link CakePHP
1.http://www.cakephp.org - The official site
2.http://cakephpforum.net - CakePHp Forum International
3.http://www.php.net.my - CakpePHP Forum Malaysia

Gammu Server Server
Integrasi dengan SMS Server
1.User register dgn MamakSpot ( username + password + mobile number )
2.User pay via payment engine ( Maybank2u,Paypal)
3.Sistem automatically activate the user status == active
4.MamakSpot will send SMS notifier you're activated using Gammu
5.User can start using Mamakspot

Saya juga terfikir mengenai mekanisma tolak kredit guna SMS, cuma masih tidak faham dengan perjalanannya.

1. User buy prepaid RM5 ( 5 hours online ) using SMS
2. user type prepaid rm5 and send to designated number
3. SMS system will deduct RM5 for user and put into my account
4. SMS system notify Mamakspot account deducted from user credit sms
5. Mamakspot auto activate the user and send activation notice

Hmmm......payment engine.

Actually dengan sistem Mamakspot, saya boleh letak Master Mamakspot server di datacenter ( sewa colocation ) dan hanya deploy AP Linksys yang telah dimodified di banyak tempat contohnya 1Ap di selayang,1AP di putrajaya....dan seterusnya

Bayangkan ada saya mempunyai 200 AP dan kesemuanya akan refer ke Master Mamakspot server untuk authentication,accounting,activation,user management etc.

Jadi untuk itu saya memerlukan mekanisme payment engine yang mudah untuk rakyat Malaysia, iaitu tolak kredit dari SMS.

Tutorial 5 : Network Cabling

2008-04-17T08:23:00.002+08:00

MamakSpot CAT 5 Wiring Video

Video mengenai Linux box dan AP Linksys

Tutorial 5: Install Coova Chilli

2008-04-16T20:26:00.004+08:00

Coova Chilli adalah server untuk mengawal user.coova akan mendapatkan data dari server radius dan akan check samaada pengguna yang ingin login mempunyai akaun, status aktif atau tidak. Jika user failed dari segi memberi password atau tidak wujud dalam sistem atau status == reject, Coova tidak membenarkan user tersebut dari masuk ke dalam sistem.

Sekiranya user berjaya masuk dalam sistem, Radius server bersama Coova akan mengawasi user tersebut dan akan membuat accounting dari segi jumlah masa online,jumlah kilobyte data download upload, ip range yang diberi.

Coova juga berfungsi memberikah IP secara DHCP kepada connected clients.

Harap anda membaca documentation dahulu di site Coova Chilli : http://coova.org/wiki/index.php/CoovaChilli

Saya menggunakan Coova Chilli versi 1.0.11

Doanload source code : http://ap.coova.org/chilli/coova-chilli-1.0.11.tar.gz

Untar : tar zxvf coova-chilli-1.0.11.tar.gz
Configure : ./configure
Make : make
Install : make install

Setelah install, kita kena configure Coova untuk menggunakan setting radius server FreeRadius. Dalam tutorial 4, kita berjaya authenticate user "mankukhayun" dengan password "abc123"

jadi perlu ingat setting radius di bawah
radius ip : 127.0.0.1
nas secret : testing123
port acct : 1812
test user account : mankukhayun
test user password : abc123
IP eth1 : 10.0.0.1

1. Edit fail configuration Coova di vi /usr/local/etc/chilli/config


vi /usr/local/etc/chilli/config

Ubah data di dalam fail config


# -*- /bin/sh -*-
#
#   Coova-Chilli Default Configurations.
#   To customize, copy this file to /usr/local/etc/chilli/config
#   and edit to your liking. This is included in shell scripts
#   that configure chilli and related programs before file 'config'.


###
#   Local Network Configurations
#

HS_WANIF=eth0            # WAN Interface toward the Internet
HS_LANIF=eth1              # Subscriber Interface for client devices
HS_NETWORK=10.0.0.1        # HotSpot Network (must include HS_UAMLISTEN)
HS_NETMASK=255.255.255.0 # HotSpot Network Netmask
HS_UAMLISTEN=10.0.0.1      # HotSpot IP Address (on subscriber network)
HS_UAMPORT=3990          # HotSpot Port (on subscriber network)

# HS_DYNIP=
# HS_DYNIP_MASK=255.255.255.0
# HS_STATIP=
# HS_STATIP_MASK=255.255.255.0
# HS_DNS_DOMAIN=
# HS_DNS1=
# HS_DNS2=

###
#   HotSpot settings for simple Captive Portal
#
HS_NASID=hotspot
#HS_UAMSECRET=testing123
HS_RADIUS=127.0.0.1
# HS_RADIUS2=rad01.coova.org
HS_RADSECRET=testing123
# HS_UAMALLOW=coova.org

#   Put entire domains in the walled-garden with DNS inspection
# HS_UAMDOMAINS=".paypal.com,.paypalobjects.com"

#   Optional initial redirect and RADIUS settings
# HS_SSID=           # To send to the captive portal
# HS_NASMAC=  # To explicitly set Called-Station-Id
# HS_NASIP=    # To explicitly set NAS-IP-Address

#   The server to be used in combination with HS_UAMFORMAT to
#   create the final chilli 'uamserver' url configuration.
HS_UAMSERVER=10.0.0.1

Save fail tersebut dan kita akan runningkan daemon chilli tersebut. laksanakan command di bawah


/usr/local/etc/init.d/chilli start

Pastikan apache web server anda sedang berjalan dan berfungsi. Kebiasaannya Apache Web Server didatangkan sekali dengan Centos. Jika anda tidak mempunyai Apache web server , sila install dahulu

Secara default, folder webroot apache terletak di path ini : /var/www/html
Folder untuk menyimpan fail cgi pula terletak di sini : /var/www/cgi-bin

Coova Chilli menggunakan fail hotspotlogin.cgi untuk authenticate user. Fail tersebut di datangkan sekali dengan source tarball yang anda telah download


[root@hotspot uam]# find / | grep 'hotspotlogin.cgi'
/root/coova/coova-chilli-1.0.11/doc/hotspotlogin.cgi

Salin fail tersebut ke dalam folder cgi-bin di /var/www/cgi-bin
Ubah permission fail tersebut


chmod +x hotspotlogin.cgi

Mari kita cuba invoke hotspotlogin.cgi menggunakan web browser. Halakan web browser anda ke http://192.168.1.2/cgi-bin/hotspotlogin.cgi

Sepatutnya anda akan menerima page seperti di dalam gambar rajah di bawah

Seterusnya kita perlu buat satu page UAM. UAM atau dikenali sebagai Universal Access Method ialah page yang serve login form dan juga status.

Anda perlu download fail ini http://protonmania.com/freeradius/uam.tar.gz
Untar fail tersebut dan copy ke folder berikut

/var/www/html/uam/

Pastikan fail-fail tersebut ada di dalam folder uam


[root@hotspot html]# ls -l /var/www/html/uam
total 20
-rw-r--r--  1 root root 8034 Feb 23 15:47 chilliController.js
-rw-r--r--  1 root root 1068 Dec 20 19:59 chilli.js
-rw-r--r--  1 root root 3491 Aug 11  2007 coova.jpg
-rw-r--r--  1 root root 1231 Mar  1 05:34 index.html
[root@hotspot html]#

Bagaimana kita hendak menguji Coova dan Radius sedang berjalan lancar ?

1.Setting TCP/IP di dalam Laptop ( atau pc ujian ) disetkan kepada DHCP ( lihat gambar rajah di bawah )

Kemudian sambungkan ke ethernet port2 Linksys di mana port 1 linksys telah disambungkan ke port ETH1 ( ip server linux ialah 10.0.0.1 )

2. Tunggu sebentar dan sepatutnya anda akan diberikan IP range 10.0.0.x secara automatik.

3. Jika anda berjaya mendapat IP, cuba surf ke internet

4. Sepatutnya anda akan ditahan dan menerima page login seperti di dalam gambar ini.

5. Masukkan username "mankukhayun" dan password "abc123" dan sepatutnya akan akan diauthenticate dan akan menerima page seperti di dalam gambar ini.

6. Anda boleh surf ke mana sahaja. Dan cuba logout menerusi status page tadi. Dan cuba untuk surf ke site lain. Sepatutnya anda akan ditahan oleh Coova Captive Portal.

7. Jika anda telah berjaya sampai ke tahap ini, secara teorinya anda berjaya mencipta HotSpot login ciptaan sendiri.

Saya menghabiskan dekat 2 bulan untuk membolehkan sistem ini dapat dibina. Jika anda gagal, sila cuba dan usaha lagi.

Tutorial seterusnya ialah saya akan mengajar bagaimana untuk menggunakan command-command Free Radius.

Tutorial 4 : Free Radius & MySQL

2008-04-16T12:47:00.008+08:00

Secara default, Free Radius akan gunakan flat file untuk simpan data. Tutorial ini akan membolehkan anda mengubah FreeRadius untuk menggunakan MySQL sebagai storage server.

Pastikan anda mempunyai MySQL Server sedang running
( secara default mysql username = "root" password = "" )


[root@localhost raddb]# /sbin/service mysqld status
mysqld (pid 6933) is running...
[root@localhost raddb]#

[root@localhost raddb]# mysql -uroot 
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 3916 to server version: 5.0.22

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql>

Sebelum teruskan tutorial ini, sila baca tutorial di bawah :

http://www.frontios.com/freeradius.html

Dah baca ? Make sure ulang baca tutorial dalam link di atas 2-3 kali. Baiklah mari kita mulakan

Kita kena install database schema dalam database MySQL. Pengetahuan penggunaan MySQL/SQL amat penting untuk memudahkan pemahaman tutorial ini.

1. Masuk ke folder /usr/local/etc/raddb/sql/mysql


[root@localhost mysql]# cd /usr/local/etc/raddb/sql/mysql
[root@localhost mysql]# pwd
/usr/local/etc/raddb/sql/mysql
[root@localhost mysql]#

List folder tersebut dan make sure ada file bernama schema.sql. Mula-mula create database bernama radius di dalam MySQL console


[root@localhost mysql]# mysql -uroot 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 3920 to server version: 5.0.22

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> create database radius;
Query OK, 1 row affected (0.00 sec)

mysql> exit
Bye
[root@localhost mysql]#

Database "radius" telah dibuat dan kita akan sumbatkan data dalam schema.sql ke dalam database "radius"

Laksanakan arahan berikut:


[root@localhost mysql]# mysql -uroot  radius < schema.sql

Pastikan database telah diinstall dengan jayanya. Masuk semula ke MySQL console dan laksanakan arahan berikut


mysql> use radius;
Database changed
mysql> show tables;
+------------------+
| Tables_in_radius |
+------------------+
| radacct          |
| radcheck         |
| radgroupcheck    |
| radgroupreply    |
| radpostauth      |
| radreply         |
| radusergroup     |
+------------------+
7 rows in set (0.01 sec)

mysql>

Sekarang kita akan mengubah radius configuration. Pergi ke folder /usr/local/etc/raddb/ dan edit fail radiusd.conf

Pastikan radiusd.conf include sql.conf


        #  Include another file that has the SQL-related configuration.
        #  This is another file only because it tends to be big.
        #
        $INCLUDE sql.conf

Kemudian edit fail sql.conf dan masukkan data seperti di bawah


        #
        #  Set the database to one of:
        #
        #       mysql, mssql, oracle, postgresql
        #
        database = "mysql"

        #
        #  Which FreeRADIUS driver to use.
        #
        driver = "rlm_sql_${database}"

        # Connection info:
        server = "localhost"
        login = "root"
        password = ""

Ok sekarang cuba run balik radiusd


/usr/local/sbin/radiusd -X

rlm_sql (sql): Could not link driver rlm_sql_mysql: rlm_sql_mysql.so: cannot ope              n shared object file: No such file or directory
rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search               path of your system's ld.
/usr/local/etc/raddb/sql.conf[22]: Instantiation failed for module "sql"
/usr/local/etc/raddb/sites-enabled/default[126]: Failed to find module "sql".

Error ? Jangan risau, error ini sentiasa dihadapi bila install Freeradius. Solutionnya kena install mysql-devel rpm. Boleh install menggunakan YUM atau download sendiri dari rpmfind.

install mysql-devel


Dependencies Resolved

=============================================================================
 Package                 Arch       Version          Repository        Size
=============================================================================
Installing:
 mysql-devel             x86_64     5.0.22-2.2.el5_1.1  rhel-x86_64-server-5  2.                                                                             4 M
 mysql-devel             i386       5.0.22-2.2.el5_1.1  rhel-x86_64-server-5  2.                                                                             4 M

Transaction Summary
=============================================================================
Install      2 Package(s)
Update       0 Package(s)
Remove       0 Package(s)

Total download size: 4.8 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): mysql-devel-5.0.22 100% |=========================| 2.4 MB    00:41
(2/2): mysql-devel-5.0.22 100% |=========================| 2.4 MB    01:18
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing: mysql-devel                  ######################### [1/2]
  Installing: mysql-devel                  ######################### [2/2]

Installed: mysql-devel.x86_64 0:5.0.22-2.2.el5_1.1 mysql-devel.i386 0:5.0.22-2.2                                                                             .el5_1.1
Complete!
[root@localhost raddb]# yum install  mysql-devel

Mysql-devel library dah install. Jadi kita kena ./configure balik source code freeradius. Kembali ke folder di mana anda untar free radius dan lakukan semua process ./configure, make dan make install dan run kembali radiusd -X

Anda sepatutnya dapat result seperti di dalam gambar di bawah

Jika berjaya dapat result seperti di atas, ini bermaksud Free Radius berjaya load library MySQL. Seterusnya kita kena configure FreeRadius supaya abaikan user yang disimpan menggunakan text files dan hanya gunakan MySQL

Edit file berikut:


[root@localhost sites-enabled]# vi /usr/local/etc/raddb/sites-enabled/default

Fail ini mengandungi realm configuration seperti
authorize{
# config
#config
}
accounting{
# config
# config
}

Kita kena matikan option Files dan enable kan Sql di dalam kedua-dua realm tersebut. Anda hanya perlu ubah 2 realm,authorize{} dan accounting{}

authorize{
# matikan files
# files
# guna mysql untuk auth
sql
}

accounting{
# gunakan sql untuk acccounting
sql
}

Boleh lihat contoh file default di http://protonmania.com/freeradius/default.txt

Restart semula radiusd -X

Sekarang kita cuba authenticate user yang disimpan di dalam database MySQL.Masukkan username bernama "mankukhayun" dan password "abc123" ke dalam table radcheck di dalam database radius


mysql> insert into radcheck (username,attribute,value,op) VALUES ('mankukhayun','Password','abc123','==');
Query OK, 1 row affected (0.00 sec)

mysql> select * from radcheck;
+----+-------------+-----------+----+--------+
| id | username    | attribute | op | value  |
+----+-------------+-----------+----+--------+
|  1 | mankukhayun | Password  | == | abc123 |
+----+-------------+-----------+----+--------+
1 row in set (0.00 sec)

Laksanakan arahan berikut


[root@localhost ~]# radtest mankukhayun abc123 127.0.0.1 1812 testing123

Jika berjaya, anda akan dapat hasil seperti di gambarajah berikut

Jika anda berjaya menamatkan tutorial hingga ke tahap ini, tahniah, kerana saya menghabiskan masa dekat 2 minggu menyelesaikan masalah Freeradius dan MySQL.

Tutorial 3 : Free Radius 2.0.3

2008-04-16T08:31:00.010+08:00

Okay, sudah sampai ke tahap nak install Free Radius. Sila download source code di URL di bawah :

http://freeradius.org/download.html

Download version 2.0.3 dan baca installation procedure. RTFM!. Saya galakkan compile dari source dari install guna RPM.

Download Free Radius


-bash-3.1$ wget ftp://ftp.freeradius.org/pub/freeradius/freeradius-server-2.0.3.                                                                             tar.gz
--08:33:54--  ftp://ftp.freeradius.org/pub/freeradius/freeradius-server-2.0.3.ta                                                                             r.gz
           => `freeradius-server-2.0.3.tar.gz'
Resolving ftp.freeradius.org... 66.135.41.84
Connecting to ftp.freeradius.org|66.135.41.84|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD /pub/freeradius ... done.
==> SIZE freeradius-server-2.0.3.tar.gz ... 3488944
==> PASV ... done.    ==> RETR freeradius-server-2.0.3.tar.gz ... done.
Length: 3488944 (3.3M)

100%[====================================================================================================================>] 3,488,944    134K/s   in 27s

08:34:25 (126 KB/s) - `freeradius-server-2.0.3.tar.gz' saved [3488944]

Untar Free Radius
-bash-3.1$ tar zxvf freeradius-server-2.0.3.tar.gz

Configure Free Radius


-bash-3.1$ pwd
/var/www/html/freeradius-server-2.0.3
-bash-3.1$ ./configure
.
.
.
configure: creating ./config.status
config.status: creating Makefile
config.status: creating config.h

Make Free Radius ( kalau tiada error )


-bash-3.1$ make

Kemudian kita install Free Radius


-bash-3.1$ make install

Kalau berjaya akan dapat mesej berikut


----------------------------------------------------------------------
Libraries have been installed in:
   /usr/local/lib

If you ever happen to want to link against installed libraries
in a given directory, LIBDIR, you must either use libtool, and
specify the full pathname of the library, or use the `-LLIBDIR'
flag during linking and do at least one of the following:
   - add LIBDIR to the `LD_LIBRARY_PATH' environment variable
     during execution
   - add LIBDIR to the `LD_RUN_PATH' environment variable
     during linking
   - use the `-Wl,--rpath -Wl,LIBDIR' linker flag
   - have your system administrator add LIBDIR to `/etc/ld.so.conf'

See any operating system documentation about shared libraries for
more information, such as the ld(1) and ld.so(8) manual pages.
----------------------------------------------------------------------
[root@localhost freeradius-server-2.0.3]#

Dan binary berikut adalah yang berasal dari freeradius


[root@localhost freeradius-server-2.0.3]# rad
radclient     radlast       radtest       radzap
radeapclient  radsqlrelay   radwho
[root@localhost freeradius-server-2.0.3]# rad

Nak uninstall Free Radius ? Malangnya, dalam Free Radius tidak diberikan sekali command make uninstall . Tapi boleh guna teknik di bawah :


You can use checkinstall to uninstall FreeRADIUS.

http://www.asic-linux.com.mx/~izto/checkinstall/

What you do is use checkinstall to install FreeRADIUS a second time from freeradius-server-2.0.2.tar.gz. You use the commands:

./configure
make
checkinstall

checkinstall will create a deb or rpm package for you. You then install the deb or rpm package and then uninstall it.

Ok. Skrg dah berjaya install Free Radius. Cuba local di mana radiusd ( Radius Daemon ) disimpan dan kita akan run untuk pertama kali


[root@localhost freeradius-server-2.0.3]# whereis radiusd
radiusd: /usr/local/sbin/radiusd

Runkan radius daemon dengan option -X ( so kita nampak apa yang sedang berlaku )


[root@localhost freeradius-server-2.0.3]# /usr/local/sbin/radiusd -X
.
.
.
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.

Berdasarkan maklumat di atas freeradius akan menggunakan 3 port iaitu 1812,1813 dan 1814.

Kita akan buat ujian Radtest untuk menguji server tersebut.Perlu diingatkan, fail configuration radius semuanya terletak di folder berikut
/usr/local/etc/raddb/

CD ke folder tersebut dan edit fail users


[root@localhost raddb]# vi /usr/local/etc/raddb/users

Dan letak configurasi berikut di bahagian paling bawah


# mamakspot user radtest demonstration
mankuk  Cleartext-Password := "hayun"

Save fail tersebut dan laksanakan arahan berikut: ( kill radiusd dan run kembali dahulu )


radtest mankuk hayun 127.0.0.1 1812 testing123

Sila lihat gambar di bawah untuk hasil command tersebut.

Cuba lihat mesej radiusd -X yang mengatakan


auth: type "PAP"
+- entering group PAP
rlm_pap: login attempt with password "hayun"
rlm_pap: Using clear text password "hayun"
rlm_pap: User authenticated successfully
++[pap] returns ok
Login OK: [mankuk/hayun] (from client localhost port 1812)

Bermaksud anda memasukkan username dan password yang betul dan dapat reply status Login OK. Cuba masukkan username dengan password yang salah


auth: type "PAP"
+- entering group PAP
rlm_pap: login attempt with password "xhayun"
rlm_pap: Using clear text password "hayun"
rlm_pap: Passwords don't match
++[pap] returns reject
auth: Failed to validate the user.
Login incorrect (rlm_pap: CLEAR TEXT password check failed): [mankuk/xhayun] (from client localhost port 1812)
  Found Post-Auth-Type Reject
+- entering group REJECT
        expand: %{User-Name} -> mankuk
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated

Anda akan direject.Dan sistem tidak akan authenticate anda.

Untuk mengubah nas secret "testing123", ubah fail clients.conf dan cari entry untuk 127.0.0.1

Jika anda telah berjaya ke tahap ini, itu sudah memadai. Tutorial seterusnya ialah kita akan ubah configuration radius server untuk menggunakan database MySQL sebagai storage. Buat masa ini anda boleh surf Google untuk maklumat menggunakan Free Radius

Objektif Tutorial 1 dan 2

2008-04-15T08:33:00.002+08:00

Objektif Tutorial 1 dan 2 ialah untuk menjadikan server Linux anda sebagai router. Router. Clients akan connect menerusi switch atau HUB yang disambungkan ke port ETH1 ( network Card 2 ). Kemudian, laksanakan arahan route.sh ( IPTABLES Firewall Script ) setiap kali boot, adalah untuk route connection ke internet menerusi ETH0 yang telah disambungkan terus ke modem Streamyx.

PC Client
10.0.0.2
|
|
|
HUB
|
|
|
ETH1 ( 10.0.0.1 )
|
|
ETH0 ( 192.168.1.2 )
|
|
MODEM STREAMYX ( 192.168.1.1 )
|
|
INTERNET

So secara amnya, anda dah boleh letak seberapa banyak clients menerusi HUB yang di connect ke ETH1, tetapi kena manually assign IP setiap client dan menggunakankan Linux sebagai router.

Tutorial seterusnya, saya akan memperkenalkan elemen paling penting dalam Mamak Spot, iaitu radius server. Jika berkesempatan, baca maklumat mengenai Free Radius di http://www.freeradius.org. Saya akan gunakan Free radius versi 2.0 untuk tutorial seterusnya. pastikan Linux anda mempunyai compiler.

Saya akan ajar bagaimana untuk compile dan install Free Radius
Kemudian kita akan install MySQL Database server
Selepas itu kita akan ubah configuration Free Radius supaya menggunakan MySQL sebagai storage.

Tutorial 2 : Setting sebagai router

2008-04-14T21:52:00.002+08:00

Pastikan anda berjaya mengikut Tutorial 1 dengan jayanya. Seterusnya, saya akan ajar bagaimana untuk menjadikan Linux anda sebagai router. Ini bermakna, Laptop anda yang connect menerusi HUB ( Linksys AP ethernet port ) --> port ETH1, dapat melayari ke internet

Laptop anda = 10.0.0.2 ( gatewaye 10.0.0.1 iaitu ETH1 )
ETH1 = 10.0.0.1

perkara pertama, kita perlu enablekan ip forwarding di dalam Linux. edit fail /etc/systcl.conf dan ubah mengikut konfigurasi di bawah.

[root@hotspot ~]# vi /etc/sysctl.conf


# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled.  See sysctl(8) and
# sysctl.conf(5) for more details.

# Controls IP packet forwarding
# ubah jadi 1 ( default =0 )
net.ipv4.ip_forward = 1

# Controls source route verification
net.ipv4.conf.default.rp_filter = 1

# Do not accept source routing
net.ipv4.conf.default.accept_source_route = 0

# Controls the System Request debugging functionality of the kernel
kernel.sysrq = 0

# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1

Kemudian, create satu script bernama route.sh dan masukkan data berikut :
route.sh


# firewall.sh
/sbin/iptables -F
/sbin/iptables -t nat -F
/sbin/iptables -t mangle -F
/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
/sbin/iptables -A FORWARD -i eth1 -j ACCEPT
echo 1 > /proc/sys/net/ipv4/ip_forward

Kemudian laksanakan arahan berikut


sh route.sh

kemudian cuba ping google.com melalui Laptop anda. sepatutnya anda boleh ping ke Google.com

Tutorial 1 : Install & Configure Network Linux Centos

2008-04-14T11:13:00.010+08:00

Kena pastikan anda mempunyai hardware berikut

1. Intel Pentium PC
2. Minima 128MB RAM
3. 2 Network Card
4. 4 keping CD kosong
5. Laptop Windows XP dengan burn cd capability
6. 2 CAT5e Straight cable ( network card )
7. Linksys WRT54GL AP

Download Linux Centos 4.6 ISO
URL : http://mirror.nsc.liu.se/CentOS/4.6/isos/i386/
Download 4 iso di atas dan burn ke dalam 4 keping CD
Saya gunakan ISO Recorder : http://isorecorder.alexfeinman.com/isorecorder.htm

Pengetahuan menggunakan Linux amat penting untuk menggunakan MamakSpot, jadi saya assume anda mempunyai pengalaman lampau install dan gunakan linux. Jika anda tidak mempunyai asas dalam Linux, sila rujuk How To dan tutorial dari Google.

Install Linux Centos dengan setting berikut
- no firewall
- server mode ( minimal configuration)
- gcc,make ,compiler kena ada

Saya assume anda berjaya install Centos 4.6 Final edition, dan di bawah adalah setting-setting yang saya guna.

Lepas install, matikan firewall, laksanakan command berikut


/sbin/service iptables stop

Matikan SELINUX, baca tutorial di http://www.revsys.com/writings/quicktips/turn-off-selinux.html

Setting untuk model Streamyx
IP-address : 192.168.1.1
Subnet : 255.255.255.0
DNS : 202.188.1.5
DNS 2 : 202.188.0.133
Mode : auto dial,auto auth
Maksudnya, kita akan set username dan password terus dalam Modem Streamyx, jadi user yang point ke gateway 192.168.1.1 akan terus dapat sambungan ke internet

Setting untuk network card 1
Nama : ETH0
IP-Address : 192.168.1.2
Subnet Mask : 255.255.255.0
Gateway Address : 192.168.1.1
Cable : Sambung terus ke ethernet port Router Modem Streamyx

# edit file : vi /etc/sysconfig/network-scripts/ifcfg-eth0
# Setting untuk network card 1
DEVICE=eth0
ONBOOT=yes
NETMASK=255.255.255.0
IPADDR=192.168.1.2
GATEWAY=192.168.1.1
TYPE=Ethernet

Ok, kita telah edit configuration untuk Network Card 1. Mari kita suba sambungan ke internet. Laksanakan command berikut :


/sbin/service network restart

Kemudian kita akan cuba sambungan ke internet dengan ping ke google.com


ping google.com

Sepatutnya anda akan dapat result seperti berikut :


[root@localhost html]# ping google.com
PING google.com (64.233.167.99) 56(84) bytes of data.
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=1 ttl=238 time=322 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=2 ttl=238 time=275 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=3 ttl=238 time=273 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=4 ttl=238 time=278 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=5 ttl=238 time=273 ms

--- google.com ping statistics ---
6 packets transmitted, 5 received, 16% packet loss, time 4997ms
rtt min/avg/max/mdev = 273.613/284.723/322.454/18.936 ms
[root@localhost html]#

Jika anda berjaya hingga ke tahap ini, anda berjaya connect Linux Box anda ke internet menggunakan laluan ETH0. Seterusnya kita akan setup Network Card 2 dengan menggunakan setting berikut:

Setting untuk network card 2
Nama : ETH1
IP-Address : 10.0.0.1
Subnet Mask : 255.255.255.0
Gateway Address : 192.168.1.2
Cable : Sambung terus ke ethernet port Linksys WRt54 GL

# edit file : vi /etc/sysconfig/network-scripts/ifcfg-eth1
# Setting untuk network card 2
DEVICE=eth1
BOOTPROTO=static
BROADCAST=10.0.0.255
HWADDR=00:0C:76:6B:0B:E0
IPADDR=10.0.0.1
NETMASK=255.255.255.0
NETWORK=10.0.0.0
ONBOOT=yes
TYPE=Ethernet

Restart semula service network menggunakan command /sbin/service dan kemudian laksanakan command berikut


/sbin/ifconfig -a

Command di atas berfungsi untuk melihat network card yang telah diconfigure dalam sistem. Sepatutnya anda akan melihat data mengenai ETH0 dan dan ETH1.


-bash-3.00$ /sbin/ifconfig -a
eth0      Link encap:Ethernet  HWaddr xxxxxxxxxxxx
     inet addr:192.168.1.2  Bcast:192.168.1.255  Mask:255.255.255.0
     inet6 addr: fe80::206:5bff:feed:62c6/64 Scope:Link
     UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
     RX packets:401058151 errors:0 dropped:0 overruns:0 frame:0
     TX packets:497301783 errors:0 dropped:0 overruns:0 carrier:0
     collisions:0 txqueuelen:100
     RX bytes:2828013415 (2.6 GiB)  TX bytes:2305496074 (2.1 GiB)
     Base address:0xcce0 Memory:feb60000-feb80000

eth1      Link encap:Ethernet  HWaddr xxxxxxxxxxxx
     inet addr:10.0.0.1  Bcast:10.0.0.255  Mask:255.255.255.0
     inet6 addr: fe80::206:5bff:feed:62c6/64 Scope:Link
     UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
     RX packets:401058151 errors:0 dropped:0 overruns:0 frame:0
     TX packets:497301783 errors:0 dropped:0 overruns:0 carrier:0
     collisions:0 txqueuelen:100
     RX bytes:2828013415 (2.6 GiB)  TX bytes:2305496074 (2.1 GiB)
     Base address:0xcce0 Memory:feb60000-feb80000

* peringatan, data di atas cuma contoh sahaja, dan bukan gambaran yang anda lihat di konsol Linux anda *

Seterusnya, sambung cable CAT 5 ( straight cable ), dari ETh1 ke ethernet port ( bukan WAN port ) AP Linksys WRT 54GL. Kemudian, sambung pula Laptop anda CAT5 cable ke ethernet port no 2 di LinksysAP yang sama.

Configure Laptop anda menggunakan setting berikut:

Setting untuk Laptop
IP-Address : 10.0.0.2
Subnet-mask : 255.255.255.0
GatewayAddress: 10.0.0.1 ( poin ke ETH1 ip address )
DNS: 202.188.1.5

Kemudian, ping ke IP 10.0.0.1

Pastikan anda dapat ping reply dari 10.0.0.1, dan kemudian baru teruskan ke bab seterusnya.

Jika anda berjaya dapat ping reply, itu sudah mencukupi untuk ke tahap ini. Sepatutnya anda tidak boleh surf ke internet . Ini disebabkan Linux anda masih belum diconfigure untuk menjadi router.

bab seterusnya kita akan configure Linux anda sebagai router menggunakan IPTABLES.

Jika ada masalah mengenai tutorial di atas, hubungi saya di 014 6412911 ( Azril Nazli )

Bahan-bahan untuk tutorial MamakSpot

2008-04-09T09:00:00.009+08:00

http://projek-tahun-akhir.blogspot.com

Ilmu tak baik simpan sorang-sorang, he heh.Ok, saya dah bersemangat nak buat tutorial, dan mungkin akan capture pakai video post terus ke Youtube. Tapi kena sediakan bahan-bahannya.

1 unit intel PC beserta 2 network card
2 unit linksys AP WRT54GL
Complete CD Linux Centos 4.6final ( download kat centos.org )..ada 4 keping
8 port hub / switch
Sambungan ke internet

Perjalanan Tutorial
--------------------------

Saya akan mulakan dengan install Linux
Kemudian saya akan setup Linux jadi router supaya client yang connect dari ETH1 boleh surf ke internet ( modem streamyx di sambung ke ETH0 )
Jika berjaya surf ke internet, saya akan teruskan dengan install Apache Web Server
Diteruskan dengan install PHP Scripting language
Dan kemudian, kita akan install MySQL Database
Seterusnya ( part paling penting ), install Free Radius
Kita akan cuba authenticate menggunakan Free Radius
Kita akan setup Free Radius untuk menggunakan MySQL database sebagai storage so, kita boleh add/edit/delete/read user radius guna MySQL
Jika server radius dah berjaya setup, kita teruskan ke setup Coova Chilli ( sangat sangat penting ), Coova Chilli nih lah yg jadi polis check user radius dan supply Captive Portal.
Kita akan setup Coova AP cakap dengan Radius
Akhir sekali, install MamakSpot PHP Script, script nih yang akan control user Wifi

Lepas tuh anda boleh start HotSpot sendiri.

Saya akan buat hujung minggu, kalau takder aral melintang ( biasanya saya akan ke Sepang f1 Circuit layan track day, atau layan Go Kart kat Shah Alam, atau layan Wife saya main Guitar Hero 3...so harap-haraplaa saya takder aktiviti pada hujung munggu )

Azril Nazli
014 6412911

Mamakspot web Interface Video

2008-03-04T01:59:00.005+08:00

This demonstration shows what Mamakspot can do. First it will capture the user and redirect into predefined lHTML page. user can register new account, login using existing account and track thier usage history. Admin can view online users and can disconnect them immedietly.

Outdoor Linksys Enclosure

2008-03-03T00:52:00.003+08:00

Outdoor linksys enclosure mounted on the wall

The working internals

An avid lowyat.net forumer ,AmirHamzah, did this thing and can get 1km radius reading.

Outdoor Linksys enclosure How-To

IP-TV running in your wireless network

2008-03-02T21:30:00.003+08:00

User click Watch TV Link in Hotspot login page

Ping to server, WDS status,client status and TV streaming

I can view the streaming TV while doing work at the kitchen

In my wifi network, I provide free IP-TV for my connected wifi even they don't have the access to the net. How do I do it ?

1. You'll need capture card off course,and use composite cable to capture your TV to PC. Use PAL encoding

2. Win XP Pro SP2 will need to download Windows Media Encoder ver 9 or trial Silverlight edition. Select the video source from your TV card and audio source , select the speed ( I choose 1024kbps ) and start streaming.

3. Using your web browser, type mms://10.0.0.19:1234 ( the 1234 is my default port for MMS, you can choose whatever port you want )

4. If successful put your MMS link to your captive portal and everybody can view the ip-tv.

PHP : User usage history

2008-03-01T23:14:00.003+08:00

Did some upgrade to MamakSpot software
- user usage history
- start time - stop time
- time difference on each session
- termination cause
- DHCP IP address assigned
- bandwidth usage ( upload and download )
- global $HEADER and $FOOTER for easy templating

Site Survey Video

2008-03-01T17:29:00.000+08:00

Presint 11 Site Survey

2008-03-01T16:36:00.006+08:00

Our Path. Taken using Google Map

200 meters from my house

Laptop -> AP3 -> Ap2 -> Ap1 -> Linux -> Internet

Presint 11 Signboard, Putrajaya

Ap2 placed in the house ( downstair ) connected to Ap1 ( upstair )

AP3 located 100m from Ap2

AP3 located 120m from Ap2

Ping reply to gateway server AP3->Ap2->Ap1-.Linux

Laptop placed 50 meter from AP3

we still get string signal after

AP2 and AP3 WDS Setting. Nazril just flashed his GL to DDWRT

AP3 netstumbler result

Kids Playground located 50 meter from Ap2.

netstumbler result

WDS status page ( Ap3 and AP 2 )

Faisal and Nazril setting up WDS connection to Ap3

Nazril is a happy man. WDS is up

WDS DDWRT

WDS status page

Using hotspotlogin.php as UAM

2008-02-29T23:48:00.003+08:00

Default login interface. Can be changed later

After logged in, there is a popup

chronology

1.user connected to my wifispot
2. user typed some url
3. captive portal catched the page and present the login form
4. user enter username and password
5. captive portal authenticated the user and popup a window
6. in popup window, shows basic info like logout and remaining time

Streaming astro audio/video over wireless

2008-02-28T01:31:00.006+08:00

TV,Streaming Server ( win xp pro 2Gb ram ), Astro decoder, capture card ( mediaforte )

Laptop connect via HOTSPOT WDS wireless and receive the streaming data uisng MMS

1024mbps streaming over wireless LAN

Windows Expression encoder using input from mediaforte Capture Card streaming video and audio ( 898kbps / 128kbps )

Video output using MMS.

Using mms://10.0.0.19:1234 as trigger for TV streaming via Media Player. I can share stream the video to connected wifi user even they haven't logged in yet. service like this will attract users to use your private wifi. currently I'm streaming directly from my Astro decoder

Netstumbler WDS graph

2008-02-27T22:07:00.003+08:00

Hotspot AP1 ( upstair )

Hotspot AP2 ( Downstair )

Experiment : WDS Single SSID

2008-02-27T21:34:00.002+08:00

Did some test today. Using 2 APs, the wired AP located upstair and the 1st WDS HOP AP located downstair.

1. Both using same channel
2. Both using same SSID ....'HOTSPOT'
3. Using my laptop, when I search for wireless, I can only see 1 SSID. And my laptop will be connected to the nearest AP.

WDS : Single HOp, Multiple HOP, Star design

2008-02-27T13:19:00.003+08:00

Currently I have 2 Linksys WRT54GL and my bro have 1 3Com WRT which support WDS. Well I'm yet to test with 3com WRT. But this tutorial is great fro those who want to max out thier WDS experience

Read the tutorial here.

PHP UAM authenticator

2008-02-27T11:08:00.002+08:00

Until yesterday, bot server 1 and server 2 is using CGI script to authenticate the users. Now I'm sporting new authenticator, hotspotlogin.php.

Yes using PHP and I'll post the code later. Just change the HS_UAMSERVICE to http://10.0.0.1/hotspotlogin.php and the script will do lots of amazing things.

Now when user log into my system, the script will popup a window and if the user close the windows, thier internet connection automatically will disconnected.

Wifi Pay Terminal

2008-02-26T11:30:00.002+08:00

Specs
IEEE 802.11g wireless LAN
IP Plug & Play
NAT (RFC 1631)
SMTP Server Redirect
DHCP Server
Static IP/DHCP Client/PPPoE/PPTP WAN Client
SSL User Login page
Usage time lapse windows for user
VPN Pass Through(IPSec/PPTP/L2TP)
Layer 2 Isolation Security
Web-Based Configuration
Syslog
Concurrent 100 Users at the same time

Coool, I can put this device anywhere and money keep coming even I'm sleeping. More info : http://www.tongya.com.tw/english/2_0_list2.php?c_id=4&p_id=4

PHP in MamakSpot

2008-02-26T09:22:00.003+08:00

This project demonstrates that using PHP , we can control applications that running in background.
Examples :
1. I'm using PHP to talk with chilli_query with sudo permission. With this, I can view and disconnect online users.

2. There is PHP radius support ( http://my2.php.net/radius ), but yet to explore the functions

3. Using MySQL database, I can control Radius users.

4. Using PHP-CGI running in background ( cron job / bash script ) enable me to run lots of maintenance issues.

Tutorial membuat Hotspot Sendiri

2008-02-25T17:47:00.004+08:00

Orang kata kalau kita share ilmu di dada, pahala yang dapat multiply :)

So mungkin satu hari nanti saya akan share bagaimana nak buat MamakSpot.

Tapi basic knowledge yang nak kena ada :

- Linux system administration ( kenala tau macam mana nak set network,install guna RPM, compile guna source code )
- Radius server ( kena tau bagaimana nak guna radius. Dapat bezakan apa itu 'files' dan 'sql' )
- MySQL server ( kena tau basic operation createdb,insert,update,delete )
- Apache ( just basic knowledge aja, run/stop service. Tau macam mana nak integrate openssl )
- PHP dan HTML ( PHP scripting pakai tangan, bukan cilok script, HTML untuk basic operation macam table..dah itu aja )
- Wireless router ( yang nih wajib tau. Macam mana nak bagi DHCP,offkan DHCP,tau nak flash )
- Captive Portal ( kalau tak tau apa fungsi captive portal, pi baca kat wikipedia )

Bahasa yang digunakan mungkin Bahasa melayu + english. Jadi tunggulah time bila saya ada masa. Skrg tengah busy nak fahamkan API drupal ( http://www.drupal.org )

Kalau nak cara Hotspot paling mudah, guna PFSENSE. tutorial dalam BM ada di sini

Berapa ramai user kah yang boleh ditanggung oleh 1 AP ?

2008-02-24T22:34:00.004+08:00

Katakan DHCP boleh lease sehingga 250 ip, rasa-rasa boleh tanggung ke 1 AP wireless dengan load sebanyak 250 users ?

Katakan kita running 1AP tanpa QOS dan semua orang mula download torrent, IM,layan youtube, mau pancit router kita nak serve semua user.

Jadi kebanyakkan installer Hotspot hanya menganggarkan 1AP hanya boleh tanggung 30 sahaja maksima, jadi baik kita setkan DHCP lease setakat 30 sahaja.

Bagaimana nak kurangkan load gateway server jika anda hosting 10-20 AP ? Katakan 1 node anda hosting 10 AP dan terus ke router modem streamyx, apa kata sebelum sampai router streamyx itu, buat satu server linux running Squid Proxy dalam mode bridging. Fungsi Squid ialah untuk mengurangkan bandwidth keluar. Jadi jika ada 10 user membuka website yang sama, 90% content akan diguna semula jadi anda telah save banyak bandwidth.

Radius attribute

2008-02-24T22:20:00.002+08:00

http://coova.org/wiki/index.php/CoovaChilli/chilli-radius(5)

In case you want to build your own Hotspot management system, understand those attributes

PHP : Introducing Prepaid & Flat Rate plan

2008-02-24T19:44:00.005+08:00

Prepaid Plan interface

Flatrate interface

Links

5 hours of programming. Playing around with WISPr-Session-Terminate-Time attribute in FreeRadius. Basically it will block the user from entering after thier time was expired.

Relocate Server1 to Bangi

2008-02-24T15:07:00.004+08:00

Server 2 with Sony laptop as client via wired cable

2 network interfaces.The top one is LAN and the below nic is WAN

Radius server successfully configured and ready to serve

Old PC internals. Running Linux Centos

Time to do real time tests with real users. I've moved server 1 Linux box and 2 APS to my bro's computer shop at Bangi.

I have 1 more PC to spare then. I've downloaded Centos ISOs from thier website and choose server installation mode.

Downloaded Chilli Coova,Free Radius and compiled then from source. Then configure Coova Chilli to talk with Free Radius,configure Free Radius to talk with MySQL and install MamakSpot software on www root.

Took nearly 6 hours just for that.

PHP; Code rewrite

2008-02-23T11:21:00.002+08:00

The current Mamak Spot php code just to demonstrate what PHP can do. So I'm thinking doing code rewrite.

To do list
- admin to display type of subscribers ( prepaid,postpaid,time block,bandwidth block )
- user will have their own management page to change password, status, remaining prepaid etc.
- system will be able to have 3 tiers of users ( superuser,operator,subscriber )
- php cron job to kick user based on time block limit and bandwidth limit

Wifi outdoor enclosure

2008-02-23T09:16:00.003+08:00

A friend of mine just gave me this great link

http://thekrome.blogspot.com/2005/11/all-weather-rugged-modular-enclosure.html

Updates on my project
********************
I've relocated my Mamakspot servers,AP,switches to my bro in law computer shop located at Bangi. WDS works great there, the signal still giving me 70-80% at 30 meters away. Well when we close the shop using military grade ,bomb proof and all weather gate, the signal was dropped while connecting from nearby Petronas.
Good things are, nearby tenants already asking for test account due to excellent signal stregth ( row 2 and 3 and nearby shops )

Wifi Monitoring : Netstumbler

2008-02-21T17:17:00.000+08:00

http://www.netstumbler.com

Well I'm going to test this tool soon. Wait for my test result.

Solar Powered Wifi AP

2008-02-21T01:56:00.002+08:00

Nice ehh ? I'm thinking to contact Mr Zul ( Electronics Master in Malaysia ) whether he can supply the solar panel at lower cost compared to Farnell solution.

WDS : The result page

2008-02-21T01:03:00.003+08:00

Uisng Xirrus for benchmark, the WDS connecting each other status is visible on DD-WRT connection status. And my laptop connection status displayed there too.

WDS status on AP1 DDWRT

WDS Status on AP2

I'm using 2 AP for WDS mode, and the 3rd Linksys is coming soon.

Wireless Distribution System

2008-02-21T00:31:00.002+08:00

I've received my 2nd Linksys WRT54GL today after days of waiting. This baby is hot cakes. You can't find any at Lowyat Plaza anymore. Took 10 minutes to upgrade the firmware to DD-WRT V23sp2 Standard edition. The goal of this project is to repeat the wireless signal from primary AP. My network setup is like this

AP2 -> AP1 -> ETH1 ( linux ) -> ETH0( linux) -> Router Modem -> Streamyx

DHCP is suuplied by my Linux server
Authentication for Hotspot done by linux server
AP1 is wired directly to ETH1 nic interface
AP2 get the resource from AP1 wirelessly using WDS
My wireless cloud is doubled after this project was done.

My Sony Laptop running MS Vista connecting from downstair. All the APs and the server is located upstair.

This is AP2, look only power supply and no wired LAN. This baby get the resource wirelessly from AP1

My bro in law war machine. Yes he's an avid gamer. Connected wirelessly to either AP1 and Ap2.

This is my datacenter. The tower on the left is Pentium 3 with 256mb ram running Fedora Linux. The black tower is my gaming PC, just for my World of Warcraft gaming experience. The ADSL modem on top of the black box is connected to ETH0 in white box.ETH1 wired to AP1 via the grey cable.

This is my primary AP, Located at the main room infront of the house.You can see the wired LAN connected to the AP.

This project is hot !

2008-02-19T22:25:00.003+08:00

Not to boost myself, but I've received several enquiries from both investors and tech junkie for past few days. Well this is a good start and off course will motivate me to put more dedication on this little project.

The PHP code is quite stable at the moment. Still waiting for my friend to provide me HTML design for
- login page
- capture page
- status page
- admin page

Well my friend is too busy with his Counter Strike game, and that will take more time.

Some ideas on this project. Where the money will come from ? Yes I like to talk about money and how to divert people's money into our pocket. The problem is my writing in English not quite good, so I'll continue in Malay.

Idea idea idea, memang best fikir macam mana nak majukan sesuatu. Jasi saya mula terfikir. Jika saya mempunyai banyak Wifi nodes yang telah di pasang, income dari subscribers dah memang masuk, jadi bagaimana nak improve income ?

Guna SMS sebagai matawang
Cuba fikir, majoriti pengguna mesti ada hand phone betul tak ? Dan dalam handphone ada kredit masa bual. Jadi saya mula terfikir. Jika si polan ini jumpa Wifi signal Mamak Spot dan nak menggunakan sistem ini dengan cepat. Saya akan create satu mekanisme di mana Si Polan tersebut boleh menghantar SMS ke nombor XXXX. Sms server saya pula akan terima permintaan Si Polan dan sistem backend MamakSpot akan berinteraksi dengan SMS server dan menghantar username/password kepada si Polan dan kredit masa bual akan ditolak ke akaun saya dan menghasilkan profit. Macam beli ringtone. Si Polan akan menerima username & password untuk 2 jam online prepaid untuk gunakan Mamak Spot. Jika saya dapat secure 100 orang yang macam Si Polam, cuba fikirkan income yang saya perolehi.

Gunakan Capture Page & Login page
Pernah dengar Google Adsense ? Anda boleh letak kod adsense di login page dan splash page. Splash page boleh di set untuk keluar setiap 10 minit. Atau jika anda tinggal di kawasan apartment yang padat penduduknya, anda dah boleh start medium pengiklanan sendiri. Biasanya letakla iklan rumah sewa di page-page tersebut. Jika anda mempunyai kemahiran untuk repair pc, pun anda boleh gunakan peluang ini.1 pc kos repair islah rata-rata RM50. Anda hanya perlu secure 10 pelanggan sebulan dan extra RM500.

Jual Bandwidth
Saya bercadang untuk menambah satu feature di mana pemilik MamakSpot ini boleh menjual bandwidth kepada operator dan terpulang la kepada operator nak jual bandwidth kepada user mereka. Contohnya yg empunya sistem ini telah melantik 5 operator dan setiap operator diberi maximum bandwidth 100GB. Kalau bandwidth dah habis, operator kenalaa bayar kat empunya untuk tambah bandwidth lagi atau mereka tidak boleh masuk ke panel pengendali. Woo cakap senang,programmer hanya saya sorang, tapi idea yang mungkin saya jadikan kenyataan.

Oklaaa dah penat, saya perlu main World Of Warcraft MMO, dikatakan puak-puak Alliance di server Nagrand sedang mara untuk meruntuhkan kota keriangan Ogrimmar. Berjuang !

Bridge 2 or more APs

2008-02-19T20:20:00.002+08:00

Bridging is one of the main feature needed to establish a Hotspot. There are conventional ways to extend your HotSpot AP.

Set Ap as bridge mode, disable DHCP, static IP and wired to switch/hub. Well this is oldschool and time consuming.

The new way of doing it is by wireless bridge. WET mode,WDS or Adhoc. Pick your style.

I'm still waiting fro my 2nd Linksys WRT54GL box for my WDS research.

http://www.wi-fiplanet.com/tutorials/article.php/3628576

Wifi Monitoring using Xirrus

2008-02-19T02:07:00.002+08:00

I'm using Xirrus gadget downloaded from http://www.xirrus.com/

Pictured in the screenshot is my 1 year old Tauren Hunter
1 year playing WoW MMO :
60k PVP kills..yup I killed 60,000 alliances kids/n00b
Conqueror title ( Exalted with WSG,AB and AV )
3/5 Vengeful Glad 2/5 Merciless Glad
11.k HP 6k Mana
Beast Mastery Spec ( eat Mages for breakfast, warlock for lunch and shaman for dinner )
Tuned for PVP, PVE is for sissies
Halaa Battle mount

NOT FOR SALE !

Radius Simultaneous-Use := 1

2008-02-17T16:10:00.004+08:00

What if you want to limit your HotSpot account can be only accessed by 1 user at a time and no simultaneous login using the same login.

Well Radius does it all, use Simultaneous-Use := 1 in your radcheck

SAMPLE for a 1 day user created on the 30/01/2008 at 09:50:31, i allow for 2 hours extra on any signup as a period of grace. from RADCHECK table in Radius......

249 cetrab14 User-Password := mazreha
250 cetrab14 Simultaneous-Use := 1
251 cetrab14 WISPr-Session-Terminate-Time := 2008-01-31T9:50:31+02:00
252 cetrab14 WISPr-Bandwidth-Max-Up := 262144
253 cetrab14 WISPr-Bandwidth-Max-Down := 2621440

Jual wifi di kawasan apartment.

2008-02-16T21:02:00.000+08:00

Time to write blog in my mother tongue, Malay

Ini adalah senario jika Mamak Spot digunakan di kawasan apartment. Saya akan memilih rumah yang terletak di tengah-tengah blok dan di tingkat paling tinggi. Jika saya membuka tingkap belakang akan nampak blok lain dan bila tengok depan pun nampak blok lain. Tengok bawah pun nampak banyak rumah-rumah lain.

Saya akan melanggan streamyx 1MB sahaja dahulu. Jadi kos souyrce broadband dalam RM88 + RM25.

Hardware yang saya perlukan pula ialah :
1.Intel PC dengan 2 NICs (
PC secondhand RM300-400 dan tambah 2 network card . Network card 1 untuk sambungan ke internet dan network card 2 untuk sambungan ke pelanggan.

2. Wireless Router Linksys WRT54GL 1.1
Memang susah nak cari model GL, tapi kalau nak, contact saya ( azril.nazli@gmail.com ) RM250. Saya gunakan model ini sebab ia menggunakan OS Linux sebagai enjin dan saya akan gunakan firmware paling popular, DD-WRT untuk gantikan firmware default. 1 unit berharga RM250 untuk permulaan saya akan buat coverage di bahagian hadapan rumah sahaja.

3. 8 ports 100mb hub
Hub kecil sahaja untuk buat wired LAN dari server ke AP. Untuk permulaan guna 1 AP sahaja, jadi option hub ini boleh diabaikan.

Software yang diperlukan pula:
1. DD-WRT Firmware ( download free @ http://dd-wrt.com )
Saya gunakan software ini untuk kuatkan kekuatan signal antenna dan juga boleh view kekuatan signal wifi pengguna saya.

2. MySQL Database
Untuk interaksi dengan RADIUS server dan storan data pengguna.

3. PHP
Saya gunakan PHP untuk mencipta software pengurusan pengguna WIFI.

4. RADIUS
Enjin utama dalan konsep perniagaan wifi. Radius server bertanggungjawab untuk membuat AAA yakni Authentication,Authorization dan Accounting. Saya juga gunakan radius untuk membuat kiraan Online Timer ( jika user guna melebihi had katakan 2 jam, sistem akan tendang user in real time ) , kiraan bandwidth ( saya nak detect samaada user jenis suka layan p2p ) dan juga bandwidth speeed ( boleh jual pakej ikut speed macam 128k,512k,1024k)

5.CoovaChilli
Captive Portal Server. Server ini akan berinteraksi dengan Radius untuk mendapatkan bacaan, jika airtime user tekah tamat, server ini akan menghalang user dari terus akses ke internet. Server ini bertanggungjawab untuk membuat 'wallgarden'. Sebelum user langgan perkhidmatan kita, dia boleh akses ke URL yang ditetapkan untuk membuat ujian.

6. Linux Fedora
Saya gunakan Linux fedora sebagai sistem operasi utama.

Kesemua software yang tertera di atas adalah percuma. Jadi kos untuk software RM0.

Kos Hardware & software:
Server - RM500 ( 2 nic )
Streamyx - RM88
Sewa telefon - RM25
1 Linksys WRt54G - RM250
1 Hub 8 port - RM100
Software - RM0
-----------------------------------
Jumlah kos - RM963

Sila dapatkan bacaan eletrik setelah sebulan berniaga dan masukkan dalam kos perjalanan perniagaan.

Jadi kos anda ialah RM1000 ( anggaran ). Anda kena membuat sedikit survey. Jenis pekerjaaan penduduk samaada banyak student atau banyak pekerja swasta/awam. Jika anda duduk berhampiran dengan kolej atau universiti, amat mudah untuk mendapatkan ramai user.

Jadi bagaimana anda nak jalankan perniagaan ? Sistem Mamak Spot boleh dijalankan dalam 3 jenis mode perniagaan

1.Jual secara Airtime
Anda boleh menjual bandwidth anda menggunakan kosen Airtime dari serendah 1 jam hingga ke beberapa bulan. Katakan anda menjual ke Encik Ahmad selama 10 jam, Encik Ahmad akan mempunyai online timer selama 10 jam. Selepas 10 jam, sistem akan menghalang akses Encik Ahmad.

3. Jual ikut tempoh
Cara paling mudah, jual ikut bulan. Katakan anda setkan Encik Ahmad boleh login sehingga 31 Mac 2008, selepas itu Encik Ahmad tidak boleh akses.

4. Jual ikut bandwidth
Anda menjual bandwidth sebanyak 20GB kepada Encik Ahmad, jika Encik Ahmad telah habis gunakan bandwidth, sistem akan menghalang akses.

Di samping itu untuk pendapatan tambahan, anda boleh perkenalkan bandwidth speed contohnya:
1.56kbps
2.128kbps
3.256kbps
4.512kbps
5.1024kbps

Sistem Mamak Spot boleh menentukan kelajuan bandwidth ini. Konsep speed ini penting kerana jika anda mempunyai 1024mbps source internet, kenalah pandai bahagi-bahagikan bandwidth. Konsep ini juga paling sesuai untuk menghalang P2P user menghabiskan bandwidth anda.

Kos adalah Rm1000 jadi saya teklah menentukan untuk menjual bandwidth secara tempoh. 1 bulan saya akan charge RM20 seorang dan dengan kelajuan 256kbps secara default. Saya perlukan 10 pelanggan dahulu ( RM200 sebulan ) dan running selama 5 bulan untuk membayar balik modal .

Bagaimana untuk mengiklankan perkhidmatan saya ?

Guna SSID
Jika ada user yang scan wireless network, dia akan jumpa SSID yang saya tentukan contohnya ' HotSpot - 0146412911'. Saya akan letakkan no telefon bimbit. Secara tak langsung, user tersebut akan menjadi pelanggan saya.

Guna Captive Portal
User yang connect ke HotSpot saya akan dihalang dari surf ke internet dan sebaliknya mereka akan dipaparkan servis Wifi yang saya jalankan dan pakej-pakej yang ada. Di samping itu saya akan iklankan perkhidmatan service PC atau juga perkhidmatan Apartment untuk di sewa. Jadi secara tak langsung, penggunaan Captive Portal adalah medium pengiklanan yang mudah.

Guna Flyer
Kedudukan peti surat di apartment atau kondo, adalah setempat. Jadi anda boleh menjalankan pengiklanan secara flyers dengan menghantar terus ke mailbox mereka.

Kesimpulan
Bergantung kepada keberkesanan pengiklanan anda, mungkin anda boleh secure 100 users dan jana RM2000 sebulan. DI kala itu anda perlulah upgrade streamyx anda ke 2Mb atau gunakan router yang support load balance seperti Xincom Twin Router. Dan anda juga perlukan banyak AP di letakkan di rumah anda.

Dan jika anda mahukan lebih cabaran, anda boleh konsep Wireless Mesh di seluruh komuniti anda dan seluruh kawasan itu akan diliputi oleh signal Wifi anda.

Banyak cara untuk buat wang, cuma rajin atau tidak.

Sekian terima kasih

Azril Nazli
Konsultan Pembinaan Laman Web,Rangkaian dan juga Pemberi Idea Niaga.

Video : How this software works in real time

2008-02-16T10:48:00.000+08:00

I've made a video featuring this software. Feel free to view.

New manage.php : with image bar for airtime usage

2008-02-16T02:15:00.000+08:00

Programming with PHP is fun. Now added image bar indicator for used airtime in manage.php

New manage,php with list of connected users

2008-02-16T01:57:00.001+08:00

Did some cosmetic changes. Admin now can disconnect users by clicking thier MAC address column. Minor programming updates on functions.php to display online status correctly.

Linksys WRT54GL 1.1 flashed with DD-WRT

2008-02-16T01:21:00.000+08:00

I'm using Linksys WRT54GL 1.1

1. Download the mini version for DD-WRT fro WRT54G

2. Reset router to factory setting

3. Using IE 6 and Sony Vaio Laptop with no other programs running

4. Upload the mini version of DD-WRT

5.Do not click continue, wait 5-10 minutes

6. DD-WRT now installed

7. Upload DD-WRT standard

8. Upgrade process around 5 minutes

9. DD-WRT Standard now installed.

Some updates

2008-02-16T01:14:00.000+08:00

Online Status
---------------------
manage.php online status now displaying more accurate data. Using shell_exec to call chilli_query list then use PHP to manipulate the data. It will show connected users ( wifi or wired ) with correct DHCP ip address and mac address.

Disconnect
--------------------
Before this I'm using disconnect table in MySQL. I've created simple bash script and running it in screen background. Every 15 secs the script will check mysql disconnect table in radius db and if any macaddress inserted into there, will be disconnected using php-cgi running as root.

Now I'm using PHP to execute chilli_query logout $mac to kick out connected user using Sudo ( remember to comment the requiretty var in visudo )

To Do lists
--------------------
1.Coupon system
2.Ajax PHP for displaying the usage bar
3.Max-Bandwidth counter in radius AAA

Airtime Usage Indicator

2008-02-10T22:47:00.000+08:00

Added airtime usage indicator bar at status page.

Mamak Spot ScreenShots

2008-02-10T01:30:00.001+08:00

Administrator login page. Using session management for protection.

Throttled 1024kbps user. Uisng iperf to meaure bandwidth.

Throttled 56kbps user. uisng iperf to measure upload/download speed.

User can self register and choose the suitable plan.

If the user used all thier prepaid, the system will automatically logged out the user.

Administration manage users page. Showing connected users, bandwidth used by each user, online time and more.

Hotspot login page.

Logged user with status page

MamakSpot : Sistem HotSpot di restoran anda

2008-02-04T00:40:00.000+08:00

Restoran mamak sentiasa menjadi tumpuan ramai, dan pertumbuhan yang pesat menyebabkan kebanjiran restoran mamak di pasaran. Jadi jika anda seorang pengusaha restoran mamak atau cafe dan inginkan kemudahan WiFi HotSpot di premis anda, sila teruskan pembacaan.

Apa kelebihan mempunyai Wifi Hotspot di premis anda ?

Pelanggan akan menghabiskan masa lebih lama dan ini bermakna mereka akan memesan lebih makanan dan minuman.

Pelanggan yang mempunyai Laptop wireless atau Handphone yang mempunyai Wifi akan datang ke premis anda berulang kali.

Lokasi premis anda akan disebarkan ke ruang chat,forum,email oleh pelanggan anda secara tidak langsung semasa mereka menggunakan HotSpot.

Sudah tentu premis anda mempunyai kelebihan berbanding premis lain.

Jika restoran pesaing berada bersebelahan, adakah pelanggan mereka melayari internet menggunakan HotSpot saya ?
Dengan menggunakan sistem Mamak Spot, anda boleh mengawal pengguna internet anda. Jika pelanggan anda ingin melayari internet, mereka perlu dapatkan katalaluan dari anda. Dan anda boleh putuskan connection setelah mereka beredar dari premis.

Bolehkan saya menjual masa online seperti menjual prepaid ?
Sistem kami membolehkan anda memberikan tempoh kepada pengguna anda dalam bilangan hari ( minima 1 hari ). Contohnya anda membuat akaun untuk Ahmad dengan 3 hari online dan anda akan menjualnya pada harga RM30.Pada hari ke 3, sistem akan menghalang Ahmad dari akses ke internet.

Apakah keperluan asas yang perlu saya ada ?
Perkhidmatan broadband
- TMNET Streamyx
- Jaring Broadband

Jika anda tiada perkhidmatan broadband, kami boleh uruskan pemasangan untuk anda. ( Streamyx sahaj )

Pakej yang terkandung dalam Mamak Spot ?
- 1 unit server yang mempunyai 2 network card dan cakera keras
- 1 unit Wireless Access Point ( Linksys WRT54G / Linksys WAP54G )
- Perisian MamakSpot
- Login page diubahsuai mengikut tema premis anda
- Latihan pengurusan
- Support percuma selama 1 bulan

Sila hubungi saya di :
Azril Nazli Alias
- 014 6412911
- azril.nazli@gmail.com