bump

Try applying a style to the button, instead of replacing it.

thanx for sharing.

@bikkerss: so both dns and gateway ? Yes. The gateway is the computer to which your computer forwards packets when your computer doesn't have a "direct" route. If the gateway is not the computer operating the captive portal then your computer can access the internet without going through the captive portal so the captive portal has no chance of controlling the access to the internet.

@Nachtfalke: Don't know if this is related to CP MAC-Auth but just for information you need to do "Plain-MAC-Auth as 802.1X request" with CP :-) I tried both methods and the auth works with "Plain-MAC-Auth as 802.1X request". Only thing is that CP doesn't seem to 'unblock' traffic for that authenticated client. Username password auth works correctly and lets me surf the internet. Also tried 2.0.3 pre-release but no luck yet. Probably better if I start a new topic since I haven't found a similar topic yet and don't want to muck about in someone else's topic.  :)

Those settings only affect the RADIUS server configured for captive portal auth. We don't have a setting in the user manager that does the same function (yet). For 2.2, those will likely be merged into the main RADIUS config in the user manager, but for now the settings on CP are just for CP.

@zcache: @kolomalo: Hi all. Perhaps this is not the correct way to do this, so sorry. I use CP to block websurfing to unauthoriced users, but would be desirable to allow some services to cross CP (like smtp, rdp, etc), since I haven't configured a DMZ, to permit some servers to connect to internet, but without websurfing. So will be a good improvement to allow to config some services to cross CP without authentication (something like "allowed hostames" tab, but with ports ;) ) Great job!! Many thanks!! I think if you just need block web surfing, I have new choice for your consider. let you see squid+squidGuard package, it can handle for block and bypass the website by user password and you also can specific the ip group. it easy over than CP.   ;D mmmmm yeah,, Now, I'm thinking that use CP to block only web surfing is not a good idea… But I didn't wanted to create too much rules...and Cp is too easy :D

Yes I can resolve the problem I clicked on the "view the current page" in the captive portal and I save the source code, and changed <title>Hotspot  Gare</ title><br />and it's OK</title>

I had these symptoms when I had inadvertently set the DHCP lease time to be LESS than the idle-timeout - logged-in user number would just keep growing until I restarted the CP service. [image: status_rrd_graph_img.png] [image: status_rrd_graph_img.png_thumb]

@pat1974: To solve this issue I go in "Services: Captive Portal" In the tab: Allowed IP addresses, I add the IP:23.1.173.15 This tells the Captive portal that when this address is being contacted it doesn't need to go through portal authentication. In this way you allow traffic to a single IP address but www.apple.com resolves to many. Here for example it resolves to 2.23.109.15: #host www.apple.com www.apple.com is an alias for www.isg-apple.com.akadns.net. www.isg-apple.com.akadns.net is an alias for www.apple.com.edgekey.net. www.apple.com.edgekey.net is an alias for e3191.c.akamaiedge.net. e3191.c.akamaiedge.net has address 2.23.109.15 maybe you have to define an 'Host Override' in Services->DNS Forwarder

Thanks I have upgraded.

hmm, I am running nanobsd. If I choose to manually upload a new firmware, will that update the second slice and leave my original install untouched? I really want to be able to go back quickly if something doesn"t work as expected. Thx

That's not a BSD-ism, on a full FreeBSD install that all works practically identical to Linux. It's the way we handle PHP that is special. We only load what we need, since we have to target smaller platforms that have less memory.

Its an issues being looked with current 2.1 snapshots. Should be fixed by next week.

The box i'm running pfsense on has 8 Ethernet connections so it has wan/lan and 6 opt interfaces. When i speak about switching is i have replicated the config on each interface and when i physically switch it comes back. I corrected this and it's ok also i found where the units where asking for the rebind attack and correct that as well. However i still have the host is down dnsmasq error. Have you found anything new on your side on this?

This has been fixed on 2.0.3 the only way to fix is to gitsync there. On 2.1 just go to a newer snapshot.

perhaps something like that? http://doc.pfsense.org/index.php/FreeRADIUS_2.x_package#CaptivePortal_Self-Registration:FreeRADIUS.2B_MySQL