You using 1.2b1? If not, try it.

thanks bro

U need to email Jonathan DeGruve or Lee Sharp (Sorry is name spelled incorectly) Just use the mono-dev list I spoke to them before but they told me that DNS can be spoofed hacked etc, there fore it is not secure :-( I like DNS for radius though

some domains like google, paypal, microsoft, yahoo (well big once) have more then 1 IP so u have to add them all in. For me ist big problem espesially pay pal with pool of 20 IPs that pereodicaly changing

Is there a reason you set the leases to only be two hours?  I would make them 8 at least, and just increase the number of addresses, that should solve your problem the default lease is two hours, but if i make it to 8 hours wouldn't it still be a problem if it's caused by the dhcp server lease ?

Hi, Didn't you set the HTTPS Captive portal page ? In this case, the URL is https://10.0.1.1:8001 and not 8000. Just in case.

I think I spoke too soon.  In doing some testing again today, I have found that my mods build the lighttpd files correctly but the redirect no longer works, which is the same behavior I saw before.  Infinitely frustrating.  Back to the code I guess.

1.0.1-SNAPSHOT-03-27-2007  seems to have solved my ssl failure. For the last 2 days, everything was fine. I keep crossing my fingers, Thansk for your help, Benoit.

I have done a massive reconfigure of the network! Added VLans and confirmed that all is in WDS mode! I added servers and new subnets and I will fire up the capture portal tonight and give it a test! Client >>> CP Server >>> routing to new subnet with Squid Server >>> Squid to PFSense Router and out the door! We shall see I will post the results….

Thanks for the response. I will definitely give pfsense a try then.  It seems as though it is what I have been looking for.  Now all I got to do is find the time to try it out hehe.

@hoba: squid won't work with captive portal currently. It has been discussed somewhere else. Please search. when I had one own server and so when I didn't use carp I used captive portal and squid and all works fine …  But I 'm going to search

Also check the state tables.  How many states are active to the captive portal. I have found a lot of environments that have viruses and such that are making outbound port 80 connections that end up getting sent to the captive portal.  What this does is overwhelm the machine due to the amount of requests a second that some viruses attempt. If you find that clients are making too many requests a second limit the client connection count in the Captive Portal settings screen.

hi thanks for the quick reply, i am thinking of: using ignore unknown clients in dhcp change the ip of my dsl router i think his desktop is going directly to my dsl router since it has the same ip of his ap gateway, that's why the desktop surf much slower than the laptop which is ps box as gateway unlike the desktop using the ap as gateway . so may be changing my dsl router's ip helps, ill try that one and btw ya chady i am running squid in transparent mode, i try what u said, i think it doesn't work.

I can tell you to look in /var/log/portalauth…its a good starting point

Why did you do it that complicated? You can upload the custum cp elements via the webgui? Also the rtoot password can be changed at system>general (root has the password of the webgui admin user).

Thanks for your reply, but I wounder how to do it, what attributes do I need to maintain in radius server, and how to build a php page that shows such information after a user log out? your help is much appreciated Regards bassam

it is really faster …

Would do but as it is a CD version I am using the .iso.gz (2007-Mar-25 14:03:52) and it currently fails to mount the file system part way through the boot. Don't know whether this is linked with the nice warning at the top of the forum, something I have done incorrectly or a bug.