Satellite + Mikrotik hotspot = dns problem?...no MSN/hotmail

I'll start with this general description because I don't know all of the details needed by any helpers to solve the problem. I will follow up with the details needed as they are requested...

I'm getting my satellite bandwidth through a DW7700. When I connect via ethernet directly to the NIC on my computer I can get into hotmail/msn etc. sites to check mail. when I add the mikrotik hotspot most surfing goes without problems. I can log onto and through the hotspot login page and get onto the internet to surf... but...

http://www.hotmail.com gets this error:

"The connection was refused when attempting to contact login.live.com"

I can't get past hotmail login window.. just the error. happens on all browsers, multiple computers...it's some setting in the Mikrotik box. From reading around the net I'm thinking a DNScache/proxy issue...but I don't know what/where to fix it...need some handholding. Like I said, I can google, Post this message here, etc., Just can't get onto that hotmail site...since most of my clients use my hotspot to check their e-mail this is a fatal flaw in the service I am attempting to deliver...Help please...

Little more description of my set-up:

dw7700:
-Satellite comes in through DW7700 modem (I have a static IP I can use, but not sure how to use it, so I'm not for the moment. The 7700 gateway address appears as 192.168.0.1 and that is also the dhcp server adress.

Mikrotik box
-I plug ether1 of the mikrotik box into the 7700 to get the internet, and plug ether2 of the Mikrotik box (which is enabled as a hotspot giving out adresses from 10.5.50.1/24 gateway...out to my wireless tranzeo 6000 AP

The Tranzeo radio has a static adress in the 10.5.50.1/24 range, but outside of the dhcp range of the hotspot...I think thats the way to do it...? besides some wireless CPEs and random wireless hotspot users, there are a few other radios associated together via WDS acting as "repeaters" (not sure if this is the right term.).

But again, the main issue is, I'm sure, something to do with dns settings in Mikrotik box since everything (login, surfing)seems to work as it should but not hotmail site... and when I remove the mikrotik box and attach my computer directly to the dw7700 modem I can use hotmail. ..

What in the mikrotik is doing this?

Satellite + Mikrotik hotspot = dns problem?...no MSN/hotmail

I'll start with this general description because I don't know all of the details needed by any helpers to solve the problem. I will follow up with the details needed as they are requested...

I'm getting my satellite bandwidth through a DW7700. When I connect via ethernet directly to the NIC on my computer I can get into hotmail/msn etc. sites to check mail. when I add the mikrotik hotspot most surfing goes without problems. I can log onto and through the hotspot login page and get onto the internet to surf... but...

http://www.hotmail.com gets this error:

"The connection was refused when attempting to contact login.live.com"

I can't get past hotmail login window.. just the error. happens on all browsers, multiple computers...it's some setting in the Mikrotik box. From reading around the net I'm thinking a DNScache/proxy issue...but I don't know what/where to fix it...need some handholding. Like I said, I can google, Post this message here, etc., Just can't get onto that hotmail site...since most of my clients use my hotspot to check their e-mail this is a fatal flaw in the service I am attempting to deliver...Help please...

Little more description of my set-up:

dw7700:
-Satellite comes in through DW7700 modem (I have a static IP I can use, but not sure how to use it, so I'm not for the moment. The 7700 gateway address appears as 192.168.0.1 and that is also the dhcp server adress.

Mikrotik box
-I plug ether1 of the mikrotik box into the 7700 to get the internet, and plug ether2 of the Mikrotik box (which is enabled as a hotspot giving out adresses from 10.5.50.1/24 gateway...out to my wireless tranzeo 6000 AP

The Tranzeo radio has a static adress in the 10.5.50.1/24 range, but outside of the dhcp range of the hotspot...I think thats the way to do it...? besides some wireless CPEs and random wireless hotspot users, there are a few other radios associated together via WDS acting as "repeaters" (not sure if this is the right term.).

But again, the main issue is, I'm sure, something to do with dns settings in Mikrotik box since everything (login, surfing)seems to work as it should but not hotmail site... and when I remove the mikrotik box and attach my computer directly to the dw7700 modem I can use hotmail. ..

What in the mikrotik is doing this?

-----------------------------------------------------------------------------------

Hi,

yes cause hotmail.com login by secure page
make sure your polcy login for hotpot must be 'HTTPS' checked condition from winbox or from telnet, hyperterminal
[setan-alas@base] ip hotspot profile> prin det
Flags: * - default
0 * name="default" hotspot-address=1.1.1.1 dns-name="hotspot" html-directory=hotspot
rate-limit="34000/32000" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0
login-by=http-chap,https,http-pap ssl-certificate=none split-user-domain=no use-radius=no
radius-accounting=no radius-interim-update=2m30s nas-port-type=ethernet
radius-default-domain="Hotspot" radius-location-id="" radius-location-name=""


try it........


peace all
BalimoreDOTcom
-----------------------------------------------------------------------------------

Wow, I was really hoping that was going to work, but no good...
True, the only setting for login was http-chap but when I added the other types, I still get blocked...same symptoms as before.

Hi,

yes cause hotmail.com login by secure page
make sure your polcy login for hotpot must be 'HTTPS' checked condition from winbox or from telnet, hyperterminal
[setan-alas@base] ip hotspot profile> prin det
Flags: * - default
0 * name="default" hotspot-address=1.1.1.1 dns-name="hotspot" html-directory=hotspot
rate-limit="34000/32000" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0
login-by=http-chap,https,http-pap ssl-certificate=none split-user-domain=no use-radius=no
radius-accounting=no radius-interim-update=2m30s nas-port-type=ethernet
radius-default-domain="Hotspot" radius-location-id="" radius-location-name=""


try it........


peace all
BalimoreDOTcom
-----------------------------------------------------------------------------------

Someone on another site suggested I do this:

I would try and go into walled garden and try and see if adding those websites to being accessible works to solve your problem.

Any suggestion on how to do this? I'm just begining with Mikrotik...

Someone else suggested this:

I have seen a MTU mismatch between interfaces cause a problem getting into hotmail/yahoo, where basically the mismatch was eating the cookies (har har) and preventing login. However this was using PPPoE, so not sure if it would have the same effect in your case.

Check yahoo mail/personals/other cookie stuff and see if it does the same thing.

Sure enough...Yahoo.com gives this similar error message:

"The connection was refused when attempting to contact login.yahoo.com"

So any suggestions? how do I fix this...?

Doesn't happen when the Mikrotik box isn't there...

Found this on the mikrotik "changelog" list...

What's new in v2.9beta10: ...added - workaround in transparent web proxy for IE6 access to Hotmail

Does anyone know how to check that this workaround is in place? and if it isn't how to put it there in the context of a hotspot configuration...???

Getting closer...I can feel it...

just want to put an end to this if anyone ever finds themselves in the same situation. I upgraded to the most recent mikrotik , but using the old backup files. When I reloaded update, system reset, and rebuilt everything from scratch everything works great now...

wow, this is great! congratulations