Hi thanks for the reply. The problem is both the users are on the same interface, I've figured out how to do it using just squidguard by putting the proxy settings into the browser but what I was hoping I could do was have a transparent proxy, and then Captive Portal could use the SquidGuard users and settings for its login. Although I am presuming this isn't possible  ???

I got frustrated and started changing settings all over the place on the iPad as well as the pfSense side.  I guess its possible I disabled the setting and wasn't aware, as the iPad is now working with redirection turned back on.

thank you it works

Add a static route that will direct traffic to that IP out a gateway IP on the MAN interface.

Cool looks like what I was looking for.  Thanks!

Thank you. It seems to work.

Through much testing I found the error. This was caused by the default gateway in the final rule. The default gateway must be "default". if you use any other gateway (directly or balancer) it will not work and react as described above.

@Army_Man: i mean i want to use the captive portal with local radius can i do that is pfsense ? i dont need any accounting things i need only to get username and the amount of MB of internet usage he used. On your first question answer is - Yes, you can use CP with local radius. Your second statement/question is contradictory - amount of traffic IS accounting. With local radius you can do some "primitive" accounting in a way that CP is generating start/stop messages to radius which write those in /var/log/radacct/users_IP address directory (like this one /var/log/radacct/192.168.151.252). Inside you will find file for each date (detail-20100608) in format detail-date_stamp. I have attached sample file which I have created for you. In those files you will find data how much of traffic is generated by user from this IP for each individual session. It is up to you then to transfer those files to your accounting computer and do something meaningful with that data. I hope that I have provided you with info needed. detail-20100608.txt

Thanks. That is exactly how I set it up in the end.

@csujoe: I have Captive Portal configured with NO user authentication and redirection set however every time I connect, I get a pfSense login screen.  I have completely removed pfSense and reconfigured it from scratch and the same results each time. All I am looking for is an open captive portal system with redirection.  Any ideas? Usually it doesn't take much to get Captive Portal going, just enable the service and it works. Can you post exactly what you put in every field of the Captive Portal configuration so that we can see if something is not set quite right?

yes my Friends !!! The Solution is here: Edit file        /usr/local/captiveportal/index.php …....................................................... if ($_POST['logout_id']) {     //disconnect_client($_POST['logout_id']);  <–-------comment this line     echo << <eod<br><title>Disconnecting...</title> You have been disconnected. EOD; disconnect_client($_POST['logout_id']);  <–---- add line Now  pop up LogOut  is closed in one click !!</eod<br>

There is a field on the CP page to upload your own html, and a file manager tab for other content.

@jimp: Everyone has access to the source code, it is open source after all.  ;D Just because you make something accessible doesn't necessarily mean it can be understood or accessed by everyone ;) Can someone tell me the maximum valid duration of a captive portal voucher roll? Regards, Stuart

The Mail Server is external. That why I did the any to an IP rule to get out because mail does not work without a Captive Portal lease.

Hello Itaca, Thanks a lot for your help. It works very well with Firefox ! Not with the others browsers (Chrome, Safari or Opera, but it's not important) :)