Automatic captive portal detection is problematic because some networks redirect outbound traffic and others block DNS requests entirely

Eamon Donovan

11/18/22, 7:09 PM

I am trying to automate captive portal detection on an IoT device. My basic understanding of a typical captive portal is that it checks a device's MAC address on connection, and if the device's user hasn't already agreed to the network owner's T&Cs then it will redirect all outgoing traffic to its splash page. This is easy to check for with curl, because if we try to access a known URL and get a 3XX html code instead then we know we're being sent elsewhere.

In testing, we're actually seeing a lot of enterprise captive portals that either drop or block access to a DNS server entirely, meaning that curl can't resolve any host that I give to it. However, the network is still able to redirect a web browser to a captive portal login page. How is the network/router able to do this without giving a device to access a DNS server and then redirecting its traffic? And is there a more reliable way to detect a network with this configuration, beyond hoping that any curl: (6) Could not resolve host: captive.apple.com means that I'm on a captive network?

0 + 1

domain-name-system

redirect

captive-portal

curl

Michael Hampton

11/18/22, 10:50 PM

Open wireshark and find out.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Automatic captive portal detection is problematic because some networks redirect outbound traffic and others block DNS requests entirely

TH: Automatic captive portal detection is problematic because some networks redirect outbound traffic and others block DNS requests entirely

RO: Automatic captive portal detection is problematic because some networks redirect outbound traffic and others block DNS requests entirely

RU: Automatic captive portal detection is problematic because some networks redirect outbound traffic and others block DNS requests entirely

VI: Automatic captive portal detection is problematic because some networks redirect outbound traffic and others block DNS requests entirely

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.