openwrt backfire with coova-chilli

Hi everybody!
I build custom openwrt firmware for my D-Link dir-320 with coova-chilli, openvpn and webif-iw-lua-coovachilli (webif-iw-lua-pepperspot) frin svn.
I configure my openvpn client and coova-chilli, but when I try to open browser and want to see coova page, redirect is broken.
My /etc/config/chillispot file:

################################################################################
#
# Sample ChilliSpot configuration file
#
################################################################################
config chilli service
option 'enable' '1'
option 'config' 'uci'

config chilli settings
# TAG: fg
# Include this flag if process is to run in the foreground
# option 'fg' '1'

# TAG: debug
# Include this flag to include debug information.
# option 'debug' '1'

# TAG: conf
# Read configuration file (default = /etc/chilli.conf) where each line
# corresponds to one command line option, but with the leading '--' removed.
# Command line options override the options given in the configuration file.
option 'conf' '/etc/chilli.conf'

# TAG: interval
# Re-read configuration file at this interval. Will also cause new domain
# name lookups to be performed. Value is given in seconds.
# option 'interval' '3600'

# TAG: pidfile
# File to store information about the process id of the program.
# The program must have write access to this file/directory.
# option 'pidfile' '/var/run/chilli.pid'

# TAG: statedir
# Directory to use for nonvolatile storage.
# The program must have write access to this directory.
# This tag is currently ignored
# option 'statedir' './'

# TUN parameters
# TAG: net
# IP network address of external packet data network
# Used to allocate dynamic IP addresses and set up routing.
# Normally you do not need to uncomment this tag.
# option 'net' '192.168.182.0/24'

# TAG: dynip
# Dynamic IP address pool
# Used to allocate dynamic IP addresses to clients.
# If not set it defaults to the net tag.
# Do not uncomment this tag unless you are an experienced user!
# option 'dynip' '192.168.182.0/24'

# TAG: statip
# Static IP address pool
# Used to allocate static IP addresses to clients.
# Do not uncomment this tag unless you are an experienced user!
# option 'statip' '192.168.182.0/24'

# TAG: dns1
# Primary DNS server.
# Will be suggested to the client.
# If omitted the system default will be used.
# Normally you do not need to uncomment this tag.
# option 'dns1' '172.16.1.1'
option 'dns1' '192.168.182.1'

# TAG: dns2
# Secondary DNS server.
# Will be suggested to the client.
# If omitted the system default will be used.
# Normally you do not need to uncomment this tag.
option 'dns2' '77.246.240.1'

# TAG: domain
# Domain name
# Will be suggested to the client.
# Normally you do not need to uncomment this tag.
# option 'domain' 'key.chillispot.org'

# TAG: ipup
# Script executed after network interface has been brought up.
# Executed with the following parameters:
#
# Normally you do not need to uncomment this tag.
# option 'ipup' '/etc/chilli.ipup'

# TAG: ipdown
# Script executed after network interface has been taken down.
# Executed with the following parameters:
#
# Normally you do not need to uncomment this tag.
# option 'ipdown' '/etc/chilli.ipdown'

# TAG: conup
# Script executed after a user has been authenticated.
# Executed with the following parameters:
#
# Normally you do not need to uncomment this tag.
# option 'conup' '/etc/chilli.conup'

# TAG: condown
# Script executed after a user has disconnected.
# Executed with the following parameters:
#
# Normally you do not need to uncomment this tag.
# option 'condown' '/etc/chilli.condown'

# Radius parameters

# TAG: radiuslisten
# IP address to listen to
# Normally you do not need to uncomment this tag.
# option 'radiuslisten' '127.0.0.1'

# TAG: radiusserver1
# IP address of radius server 1
# For most installations you need to modify this tag.
# option 'radiusserver1' 'rad01.chillispot.org'
# option 'radiusserver1' '172.16.1.2'
option 'radiusserver1' '192.168.254.1'

# TAG: radiusserver2
# IP address of radius server 2
# If you have only one radius server you should set radiusserver2 to the
# same value as radiusserver1.
# For most installations you need to modify this tag.
# option 'radiusserver2' 'rad02.chillispot.org'
# option 'radiusserver2' '172.16.1.2'
option 'radiusserver2' '192.168.254.1'

# TAG: radiusauthport
# Radius authentication port
# The UDP port number to use for radius authentication requests.
# The same port number is used for both radiusserver1 and radiusserver2.
# Normally you do not need to uncomment this tag.
# option 'radiusauthport' '1812'

# TAG: radiusacctport
# Radius accounting port
# The UDP port number to use for radius accounting requests.
# The same port number is used for both radiusserver1 and radiusserver2.
# Normally you do not need to uncomment this tag.
# option 'radiusacctport' '1813'

# TAG: radiussecret
# Radius shared secret for both servers
# For all installations you should modify this tag.
option 'radiussecret' 'hotspot'

# TAG: radiusnasid
# Radius NAS-Identifier
# Normally you do not need to uncomment this tag.
# option 'radiusnasid' 'nas01'

# TAG: radiusnasip
# Radius NAS-IP-Address
# Normally you do not need to uncomment this tag.
# option 'radiusnasip' '127.0.0.1'
# option 'radiusnasip' '10.10.0.29'

# TAG: radiuscalled
# Radius Called-Station-ID
# Normally you do not need to uncomment this tag.
# option 'radiuscalled' '00133300'

# TAG: radiuslocationid
# WISPr Location ID. Should be in the format: isocc=,
# cc=,ac=,network=
# Normally you do not need to uncomment this tag.
# option 'radiuslocationid' 'isocc=us,cc=1,ac=408,network=ACMEWISP_NewarkAirport'

# TAG: radiuslocationname
# WISPr Location Name. Should be in the format:
# ,
# Normally you do not need to uncomment this tag.
# option 'radiuslocationname' 'ACMEWISP,Gate_14_Terminal_C_of_Newark_Airport'
# option 'radiuslocationname' '"Centro San Ignacio"'

# TAG: radiusnasporttype
# Value of NAS-Port-Type attribute. Defaults to 19 (Wireless-IEEE-802.11).
# option 'radiusnasporttype' '19'

# TAG: coaport
# UDP port to listen to for accepting radius disconnect requests.
# option 'coaport' 'port'

# TAG: coanoipcheck
# If this option is given no check is performed on the source IP address of radius disconnect requests. Otherwise it is checked that radius disconnect requests originate from radiusserver1 or radiusserver2.
# option 'coanoipcheck' '0'

# Radius proxy parameters

# TAG: proxylisten
# IP address to listen to
# Normally you do not need to uncomment this tag.
# option 'proxylisten' '10.0.0.1'

# TAG: proxyport
# UDP port to listen to.
# If not specified a port will be selected by the system
# Normally you do not need to uncomment this tag.
# option 'proxyport' '1645'

# TAG: proxyclient
# Client(s) from which we accept radius requests
# Normally you do not need to uncomment this tag.
# option 'proxyclient' '10.0.0.1/24'

# TAG: proxysecret
# Radius proxy shared secret for all clients
# If not specified defaults to radiussecret
# Normally you do not need to uncomment this tag.
# option 'proxysecret' 'testing123'

# TAG: confusername
# If confusername is specified together with confpassword chillispot
# will at regular intervals specified by the interval option query the
# radius server for configuration information.
# The reply from the radius server must have the Service-Type attribute set to
# ChilliSpot-Authorize-Only in order to have any effect.
# Currently ChilliSpot-UAM-Allowed, ChilliSpot-MAC-Allowed and
# ChilliSpot-Interval is supported. These attributes override the uamallowed ,
# macallowed and interval options respectively.
# Normally you do not need to uncomment this tag.
# option 'confusername' 'conf'

# TAG: confpassword
# If confusername is specified together with confpassword chillispot
# will at regular intervals specified by the interval option query the
# radius server for configuration information.
# Normally you do not need to uncomment this tag.
# option 'confpassword' 'secret'

# DHCP Parameters
# TAG: dhcpif
# Ethernet interface to listen to.
# This is the network interface which is connected to the access points.
# In a typical configuration this tag should be set to eth1.
option 'dhcpif' 'br-lan'

# TAG: dhcpmac
# Use specified MAC address.
# MAC address to listen to. If not specified the MAC address of the interface
# will be used. The MAC address should be chosen so that it does not conflict
# with other addresses on the LAN.
# An address in the range 00:00:5E:00:02:00 - 00:00:5E:FF:FF:FF falls
# within the IANA range of addresses and is not allocated for other purposes.
# The --dhcpmac option can be used in conjunction with access filters in the
# access points, or with access points which supports packet forwarding to a
# specific MAC address. Thus it is possible at the MAC level to separate access
# point management traffic from user traffic for improved system security.
#
# The --dhcpmac option will set the interface in promisc mode.
# Normally you do not need to uncomment this tag.
# option 'dhcpmac' '00:00:5E:00:02:00'

# TAG: lease
# Time before DHCP lease expires
# Normally you do not need to uncomment this tag.
# option 'lease' '600'

# TAG: eapolenable
# If this option is given IEEE 802.1x authentication is enabled.
# ChilliSpot will listen for EAP authentication requests on the interface
# specified by --dhcpif.
# EAP messages received on this interface are forwarded to the radius server.
# option 'eapolenable' '0'

# Universal access method (UAM) parameters

# TAG: uamserver
# URL of web server handling authentication.
# option 'uamserver' 'https://radius.chillispot.org/hotspotlogin'
option 'uamserver' 'http://192.168.182.1:3990/prelogin'
# option 'uamserver' 'http://www.internet-wifi.com.ar/hotspotlogin_m.php'
# option 'uamserver' 'https://www.intra-urbalink.com/hotspots/hotspotlogin.php'

# TAG: uamhomepage
# URL of welcome homepage.
# Unauthenticated users will be redirected to this URL. If not specified
# users will be redirected to the uamserver instead.
# Normally you do not need to uncomment this tag.
# option 'uamhomepage' 'http://192.168.182.1:3990/www/coova.html'
# option 'uamhomepage' 'https://www.intra-urbalink.com/abawifi/index.html'

# TAG: uamsecret
# Shared between chilli and authentication web server
# option 'uamsecret' 'ht2eb8ej6s4et3rg1ulp'
# option 'uamsecret' 'InternetWifi'
# option 'uamsecret' 'ht2eb8ej6s4et3rg1ulp'

# TAG: uamlisten
# IP address to listen to for authentication requests
# Do not uncomment this tag unless you are an experienced user!
option 'uamlisten' '192.168.182.1'

# TAG: uamport
# TCP port to listen to for authentication requests
# Do not uncomment this tag unless you are an experienced user!
option 'uamport' '3990'

# TAG: uamallowed
# Comma separated list of domain names, IP addresses or network segments
# the client can access without first authenticating.
# Normally you do not need to uncomment this tag.
# option 'uamallowed' 'www.chillispot.org,10.11.12.0/24'
option 'uamallowed' '172.16.0.1,192.168.1.1,www.google.com,192.168.254.0/24,192.168.182.0/24,188.40.64.206'
# option 'uamallowed' '190.7.25.160,www.urbalink.com,www.intra-urbalink.com,www.cantv.com.ve,www.cantv.net,www.myipaddress.com'

# TAG: uamanydns
# If this flag is given unauthenticated users are allowed to use
# any DNS server.
# Normally you do not need to uncomment this tag.
option 'uamanydns' '1'

# MAC authentication

# TAG: macauth
# If this flag is given users will be authenticated only on their MAC
# address.
# Normally you do not need to uncomment this tag.
# option 'macauth' '0'

# TAG: macallowed
# List of MAC addresses.
# The MAC addresses specified in this list will be authenticated only on
# their MAC address.
# The User-Name sent to the radius server will consist of the MAC address and
# an optional suffix which is specified by the macsuffix option.
# If the macauth option is specified the macallowed option is ignored.
# It is possible to specify the macallowed option several times.
# This is useful if many mac addresses has to be specified.
# This tag is ignored if the macauth tag is given.
# Normally you do not need to uncomment this tag.
# option 'macallowed' '00-0A-5E-AC-BE-51,00-30-1B-3C-32-E9,00-18-DE-26-E8-35'

# TAG: macpasswd
# Password to use for MAC authentication.
# Normally you do not need to uncomment this tag.
# option 'macpasswd' 'password'

# TAG: macsuffix
# Suffix to add to MAC address in order to form the User-Name,
# which is sent to the radius server.
# Normally you do not need to uncomment this tag.
# option 'macsuffix' 'suffix'

# TAG: rmtlisten
# IP address to listen to for remote monitor and config
# Do not uncomment this tag unless you are an experienced user!
# option 'rmtlisten' '127.0.0.1'

# TAG: rmtport
# TCP port to listen to for remote monitor and config
# Do not uncomment this tag unless you are an experienced user!
# option 'rmtport' '3991'

# TAG: rmtpasswd
# Password to use for remote config by socket.
# Normally you do not need to uncomment this tag.
# option 'rmtpasswd' 'rmtpassword'

# TAG: uamallowed
# Alternative way to set uamallowed,
# It is possible to specify this tag multiple times.
#config uamallow
# option 'uamallowed' 'www.google.com,192.168.4.0/24'
#config uamallow
# option 'uamallowed' 'www.altavista.com,192.168.3.0/24'

# TAG: macallowed
# Alternative way to set it
# It is possible to specify this tag multiple times.
#config macallow
# option 'macallowed' '00-0A-5E-AC-BE-51,00-30-1B-3C-32-E9'
#config macallow
# option 'macallowed' '00-18-DE-26-E8-35'

option 'wwwdir' '/etc/chilli/www'
option 'wwwbin' '/etc/chilli/wwwsh'

My /etc/chilli.conf

#
# Chilli Configuration
#
# To configure chilli, see /etc/chilli/default
# and then create your own /etc/chilli/config
# start / stop chilli with /chilli
#
# For help with coova-chilli,
# visit http://coova.org/wiki/index.php/CoovaChilli
#
# This file can either contain all your chilli configurations, or include
# other files, as shown per default below. The idea here is that main.conf
# contains your main configurations, hs.conf is for your configurations
# delivered by RADIUS (using the Administrative-User login), and local.conf
# is for any other settings you might configure by hand for this particular
# installation.

include /etc/chilli/main.conf
include /etc/chilli/hs.conf
include /etc/chilli/local.conf

ipup=/etc/chilli/up.sh
ipdown=/etc/chilli/down.sh

wwwdir=/etc/chilli/www
wwwbin=/etc/chilli/wwwsh

And my /var/log/messages

Apr 5 13:04:01 coova-chilli[4566]: CoovaChilli(ChilliSpot) 1.2.5. Copyright 2002-2005 Mondru AB. Licensed under GPL. Copyright 2006-2010 Coova Technologies, LLC . Licensed
under GPL. See http://www.coova.org/ for details.
Apr 5 13:04:01 coova-chilli[4566]: tun.c: 520: TX queue length set to 100
Apr 5 13:04:01 kernel: device br-lan entered promiscuous mode
Apr 5 13:04:01 coova-chilli[4566]: chilli.c: 3721: New DHCP request from MAC=64-31-50-01-2C-58
Apr 5 13:04:01 coova-chilli[4566]: chilli.c: 3676: Client MAC=64-31-50-01-2C-58 assigned IP 192.168.182.2
Apr 5 13:04:01 coova-chilli[4566]: chilli.c: 3721: New DHCP request from MAC=08-00-27-E5-DD-1D
Apr 5 13:04:44 coova-chilli[4566]: chilli.c: 3676: Client MAC=08-00-27-E5-DD-1D assigned IP 192.168.182.3
Apr 5 13:07:25 coova-chilli[4695]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:25 coova-chilli[4696]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:25 coova-chilli[4697]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:25 coova-chilli[4698]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:25 coova-chilli[4699]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:30 coova-chilli[4700]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:30 coova-chilli[4701]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:30 coova-chilli[4702]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:31 coova-chilli[4703]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:07:31 coova-chilli[4704]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:18:32 coova-chilli[4566]: chilli.c: 3887: DHCP Released MAC=64-31-50-01-2C-58 IP=192.168.182.2
Apr 5 13:18:32 coova-chilli[4566]: chilli.c: 3721: New DHCP request from MAC=64-31-50-01-2C-58
Apr 5 13:18:32 coova-chilli[4566]: chilli.c: 3676: Client MAC=64-31-50-01-2C-58 assigned IP 192.168.182.4
Apr 5 13:20:35 coova-chilli[4705]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:20:35 coova-chilli[4706]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:20:36 coova-chilli[4707]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:20:36 coova-chilli[4708]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:20:36 coova-chilli[4709]: redir.c: 3484: Required: 'wwwdir' (in chilli.conf) and 'file' query-string param
Apr 5 13:31:37 coova-chilli[4566]: chilli.c: 3887: DHCP Released MAC=64-31-50-01-2C-58 IP=192.168.182.4
Apr 5 13:31:38 coova-chilli[4566]: chilli.c: 3721: New DHCP request from MAC=64-31-50-01-2C-58
Apr 5 13:31:38 coova-chilli[4566]: chilli.c: 3676: Client MAC=64-31-50-01-2C-58 assigned IP 192.168.182.5

Im using backfire with

Im using backfire with coovachilli but my configuration is set with /etc/chilli/config file, may be there are some problems with that web interface, why dont you try insolating the problem configuring coovachilli alone.

Try also adding this lines to /etc/chilli/up.sh

# may not have been populated the first time; run again
[ -e "/var/run/chilli.iptables" ] && sh /var/run/chilli.iptables 2>/dev/null
# force-add the final rule necessary to fix routing tables
iptables -I POSTROUTING -t nat -o $HS_WANIF -j MASQUERADE

this works for me

Cheers
Marco

i have applied this before

it is random they work for days then the windir issue and your right no redir. I really think it could be a bug some where that shows up some times and sometimes not. I have close to around 40 out there and some do and some don't have this issue, all loaded from the exact same config. also made one config from scratch same issues. I think the 128 version is unstable but I placed bandaids all around it and it seem s to work. Solution I found is reload hs setting when my logging server gets the error message "windir thing"( that I think has no relationship to this error) and it starts working again.

Your command just runs at startup correct? I see the issues after days of it working-- then choak-broken!!!! LOL