<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas","serif";
color:black;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:2131363756;
mso-list-type:hybrid;
mso-list-template-ids:-1236521592 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Hi Joe,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I had a similar problem with Kindles a few weeks ago, and my solution to fix it was this:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I upgraded the version of ISC DHCP Server (Im pretty sure IpCop runs dhcpd) however upgrading just that module is not always the easiest thing to do with a package like Ipcop.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>However, what you can do is edit the dhcpd.config file on IPcop and find or add the following<o:p></o:p></span></p><div style='mso-element:para-border-div;border:inset 1.0pt;padding:5.0pt 5.0pt 5.0pt 5.0pt'><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:10.0pt;font-family:"Courier New";color:windowtext'> <o:p></o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:10.0pt;font-family:"Courier New";color:windowtext'> option domain-name-servers $DNS_SERVER_IP;<o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>where it says “option domain-name-servers $DNS_Server_IP; That is a variable you must assign. You can change that to an actual DNS server that is NOT your default gateway…this will cause dhcpd to assign this as the clients DNS. I have found this fixes the kindle as the kindle MUST be able to resolve DNS to Amazon’s cloud in order for it to say its connected to your wifi properly. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>If you don’t want to edit the config file, you can use IPcop’s GUI to make the changes as noted in this article (the field Primary and Secondary DNS is what your looking for on that screenshot)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://www.ipcop.org/2.0.0/en/admin/html/services-dhcp.html">http://www.ipcop.org/2.0.0/en/admin/html/services-dhcp.html</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>so for example if your using Oplin’s DNS servers you need to go into your dhcp server or dhcpd config file and tell dhcpd to assign 156.63.130.100 as the primary DNS for DHCP clients on your wireless network and not the default gateway IP or else some mobile devices such as the Kindle won’t work rightI have found using dhcpd to actually assign the same DNS servers the firewall system uses to the clients instead of using the default gateway of the firewall private address space has resolved the issue completely.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>It seems in some cases the Kindle is fooled into thinking its not connected because DNS won’t resolve past the portal page without agreeing. By adding DNS(such as oplin’s) and using your dhcp server or dhcpd to actually assign that address instead of the default gateway as DNS causes the kindle to function properly. Also if you have a way of passlisting traffic, passlist those DNS servers through your portal page…that way the Kindle can resolve DNS to the Amazon cloud and they will still have to agree to your portal page to browse the net.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>If your using OpenDNS just assign those servers via DHCP in place of the IPcop IP and exempt those dns servers from your portal page(if your running one)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I actually meant to post this earlier and forgot. I had a question about this as well. I spent a few days tracking down the issue and this is what I found out the problem was. The Kindle is notorious for the X next to wifi..you can ping it just fine, its connected but it won’t do anything…I was able to track it to the DNS issue above. Once the DNS issue with DHCP was fixed, the TOS page would then resolve properly and the user would agree, the connection would function as intended.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>If you have any questions, feel free to ask. Ipcop has a GUI for setting that DNS and should make it pretty simple. If IPCop is using 156.63.130.100 as its DNS server, then just put that same DNS server in under the DHCP setting for DNS…this will cause DHCP to assign the 156.63.130.100 as the DNS server instead of the IP of the IPcop box. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>This has fixed my issue, your mileage may vary.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Sincerely<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Ron Woods<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Computer Services Manager<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>St. Clairsville Public Library<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>740-695-2062<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>http://www.stclibrary.org<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>woodsro@oplin.org<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> oplintech-bounces@lists.oplin.org [mailto:oplintech-bounces@lists.oplin.org] <b>On Behalf Of </b>Chad Neeper<br><b>Sent:</b> Wednesday, February 01, 2012 4:35 PM<br><b>To:</b> oplintech@lists.oplin.org<br><b>Subject:</b> Re: [OPLINTECH] wireless access on kindles and ipads<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>You're not running any sort of "click this button to accept the library's access policies" proxy are you? I seem to recall others having this problem on occasion, where the policy page wasn't being displayed on the Kindle/iPad/WhatHaveYou and thus couldn't be accepted prior to browsing.<br><br><o:p></o:p></p><div><p class=MsoNormal>______________________________<br><b>Chad Neeper</b><br><span style='font-size:10.0pt'>Senior Systems Engineer</span><br><br><b>Level 9 Networks</b><br><span style='font-size:10.0pt'>740-548-8070 (voice)<br>866-214-6607 (fax)</span><br><br><i><span style='font-size:7.5pt'>Full LAN/WAN consulting services -- Specialized in libraries and schools</span></i><o:p></o:p></p></div><p class=MsoNormal><br>On 1/31/2012 4:47 PM, Joe wrote: <o:p></o:p></p><pre>I know this is kind of shot in the darkish, but the last few days, I <o:p></o:p></pre><pre>have found that it seems that people with Kindles and Ipads are either <o:p></o:p></pre><pre>unable to connect to our wireless network, or in the case of the ipad, <o:p></o:p></pre><pre>can connect but cannot browse the web.. Has anybody else seen something <o:p></o:p></pre><pre>like this happen? (we're running ipcop 2.0 and dd-wrt on the access <o:p></o:p></pre><pre>points..)<o:p></o:p></pre><pre><o:p> </o:p></pre><pre><o:p> </o:p></pre><pre>The only think I can think of that we have changed recently is that we <o:p></o:p></pre><pre>upgrade our IPCop firewall to ver. 2.0, but I can't see anything in the <o:p></o:p></pre><pre>settings that would lead to these device specific outages..<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>So, has anybody else seen something similar of late?<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Thanks.<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Joe<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Joseph Knueven<o:p></o:p></pre><pre>Director<o:p></o:p></pre><pre>Germantown Public Library<o:p></o:p></pre><pre>51 N. Plum St.<o:p></o:p></pre><pre>Germantown, OH 45327<o:p></o:p></pre><pre>937-696-9998x10<o:p></o:p></pre><pre><a href="mailto:knuevejo@oplin.org">knuevejo@oplin.org</a><o:p></o:p></pre><pre><o:p> </o:p></pre><pre><o:p> </o:p></pre><pre>_______________________________________________<o:p></o:p></pre><pre>OPLINTECH mailing list<o:p></o:p></pre><pre><a href="mailto:OPLINTECH@lists.oplin.org">OPLINTECH@lists.oplin.org</a><o:p></o:p></pre><pre><a href="http://lists.oplin.org/mailman/listinfo/oplintech">http://lists.oplin.org/mailman/listinfo/oplintech</a><o:p></o:p></pre><pre>Search: <a href="http://oplin.org/techsearch">http://oplin.org/techsearch</a><o:p></o:p></pre><pre><o:p> </o:p></pre></div></body></html>