Thank you. In my search I could not find this answer.

yea… i dont know what to do now. Because i installed pfsense in pc because mikrotik didn't supported UDP port openvpn, but now i cant limit the bandwidth of hotspot user in pfsense.

For sure they don´t and this perhaps for ever, related to the circumstance that OpenVPN is OpenSource
Software and mostly if you or another one adopt something from this kind of software you must be serve
then this new software to the whole public again! But MikroTik is taking license fees for their software
called RouterOS, and so they don´t take all inside of RouterOS, thats the point.

If you need a really good VPN server that is accepting nearly all kinds of VPN types
you should be having a closer look on this project here, SoftEtherVPN si able to be
installed on Linux, Windows, FreeBSD and is really feature rich. Many peoples use
it in a DMZ as a VPN server with great efforts on older HP Proliant Micro Servers.

I'll probably just flash the mikrotik router with openwrt and run both thing from there. thanks for the reply

You could be taking a small MikroTik router behind the pfSense and let the MikroTik do the
queuing job for all the user limitings, its not such a big deal or?

Good luck.

@doktornotor:

Yeah, stop using the Squid patch.@new_in_pf:

when i enable  transparent mode of squid, these empty lines added to file, even i get any permission of capticeportal.inc file but this will continue to add empty lines.

Yeah, stop enabling that with CP.

https://redmine.pfsense.org/issues/4583

Now with PR to remove the "feature" and hopefully fix the screwed code. https://github.com/pfsense/pfsense-packages/pull/904

Dude, dunno. If you make vouchers with short expiration as said above and add the MAC to passthrough, it's kinda hard to share it later because it's no longer valid.

Could you send me a backup of your impacted config? Not sure what could be happening there but there's clearly something wrong. Can email to cmb at pfsense dot org with a link to this thread.

@doktornotor:

Meaning CP in general just miserably FAILS to work with Squid. Plus will itself get screwed by the Squid "integration" patch.

Hi Thanks for the information,seems got no solution for this, may be an update in the future  will…

Thanks a lot..

n3by is right.

Just activate 'Local user' login - don't add any users.
This way, users with a MAC on the list have access - others will just hit the portal ….

@uaxero:

then you mean, that functionality will no longer be present from the 2.2 release?

No, just saying in that context, lan_vip15 is no longer listed because it no longer exists.

You get redirected to 127.0.0.1, not the CARP IP, which is always how things worked. There is no need to do anything with the CARP IP there.

Same Problem with me. Anyone got an idea?

I am also getting this problem after changing the hard timeout value from empty to some number. I am using 2.2.3. A temporary fix is to remove the hard timeout value.

Will do that, thank you!

You used to have to upload a null file to clear it.

cp /dev/null portal_reset.html

Then upload that.

One solution that make you issue work:
Back-port the actual code too your pfSense installation.

From what I recall, the removal of firewall rules was buggy back then (2.1.5) so they repaired it - which introduces new versions.

You you don't want do 'deal' with it (because you can't), but you have the need to have your pfSense modified without being upgraded: switch to this sub-forum https://forum.pfsense.org/index.php?board=34.0 (be SURE that you read the rules FIRST).

Be ready to find out that the 'repair' will break squid …...

Hi All,

Thanks for your reply,yeah i guess i need to disable the captive portal,,thanks it helps me alot

Thanks

Sounds like you have a WiFi AP in routing mode connected to CP. That will not ever work properly.