Hi, I resolve this problem. I generate little perl script which checks if account is activated and put Reject for it when crontab run this script. Maybe some one else is thinking this same problem, so i decide to put my answer here. crontab: 0 0 * * * root /usr/bin/cpcheck.pl script: see attachment. Br, Ville cpcheck.pl.txt

Okay, changes will be present in RC3. Thanks for testing.

Ops I forgot, in 2 i enabled the load balancer and i configured the gateway for LAN rule to Balancer. Rodrigo Quilez São Paulo - Brasil

Can you post that at the m0n0 list? The CP is more or less a rip off of the m0n0 code. As CP is mainly developed at m0n0wall this would break syncability between m0n0 and pfSense. We are trying to stay the same like m0n0 here.

This is already present in the head tree where you will be able to lock privileges of every tab and every menuitem with the usermanager and add multiple users. Just be patient  ;)

Not sure about the caller id portion but when you receive a blank page its a sign of: 1.  Captive Portal cannot locate a MAC address for the client (disable mac filtering) 2.  Captive Portal cannot locate a IP address from the client (shouldn't happen, but …)

Thanks much, I'll see how the newer code works.

Yes, if your clients are behind another routing device then captive portal basically will bail without notifying you since it cannot figure out the MAC address correctly. It really should be a little better at reporting this error.  I'll see if I can spruce it up and submit a patch to Jonathon.

Looks like they only allow the site to be accessed by the domainname. If you add the IP to the allowed IP Adresses you can access the site by the domainname. This is not a captive portal issue, it also happens without using the captive portal. It's just the way this site is setup. Use the domainname to access the site through the captive portal.

Ok downloaded RC2 and did a clean install.  I installed the squid package and got the squid -z error still.  I ran the command in the shell and fixed that.  But it still will not run.  Here is system log Aug 2 16:20:56 syslogd: kernel boot file is /boot/kernel/kernel Aug 2 16:21:05 squid[5511]: Squid Parent: child process 5514 exited due to signal 15 Aug 2 16:21:06 Squid_Alarm[6268]: Squid has exited. Reconfiguring filter. Aug 2 16:21:06 Squid_Alarm[6270]: Attempting restart… Aug 2 16:21:06 squid[6273]: Squid Parent: child process 6276 started Aug 2 16:21:09 Squid_Alarm[6286]: Reconfiguring filter… Aug 2 16:21:12 php: : SQUID is installed but not started. Not installing redirect rules. Aug 2 16:21:12 php: : SQUID is installed but not started. Not installing redirect rules. Aug 2 16:21:14 squid[6473]: Squid Parent: child process 6475 started Aug 2 16:22:42 dhclient: New IP Address (le0): 192.168.3.156 Aug 2 16:22:42 dhclient: New Subnet Mask (le0): 255.255.255.0 Aug 2 16:22:43 dhclient: New Broadcast Address (le0): 192.168.3.255 Aug 2 16:22:43 dhclient: New Routers (le0): 192.168.3.3 Aug 2 16:22:43 dhclient: /sbin/route add default 192.168.3.3 Aug 2 16:22:47 php: : Informational: DHClient spawned /etc/rc.newwanip and the new ip is wan - 192.168.3.156. Aug 2 16:22:48 php: : Creating rrd update script Aug 2 16:22:48 php: : Creating rrd graph index Aug 2 16:22:50 php: : SQUID is installed but not started. Not installing redirect rules. Aug 2 16:22:50 php: : SQUID is installed but not started. Not installing redirect rules. Aug 2 16:23:43 squid[7449]: Squid Parent: child process 7454 started Aug 2 16:23:44 (squid): The dnsserver helpers are crashing too rapidly, need help! Aug 2 16:23:44 kernel: pid 7454 (squid), uid 62: exited on signal 6 Thanks Jason Could I also suggest that maybe when the squid package is installed it makes a tab on the logs page so you can view the squid logs.

@angelcabello: I am searching how to include this changes in the distribution. Submit your changes as diff against the latest head version of the modified files. Just add them here as attachment and we'll review and consider including them.

I tried to push it up via firmware upgrade to save some time, but no go.  I will wipe the box & reload. This time I will enable the other two nics in bios prior to the install

Hi, yes, gateway, and dns are pointing to the firewall.

The captive portal is still one of the most actively developed parts of m0n0wall. Maybe you should suggest such a change at the m0n0list as we due to that are syncing pfSense's cp against the m0n0 code frequently without changing too much.

Sorry for my mistake, when squid is configured in transparent mode captive portal work very well but proxy server is running as “if();” . It’s any chance to run squid in transparent mode with captive portal ?

it's me again :-) things go better, i can now authenticate my users with NAS-Port-Type and NAS-Identifier attributes. but there is one more problem : it seems that called-station-id and calling-station-id are not sent by pfsense, users are always refused if i try to authenticate with called-station-id="pfsense wan IP" and calling-station-id is empty in the radacct table. what gives ?

Thanks, we are aware of the bug.  No need to confirm further.  What we need is for people to test a recent shapshost from pfsense.com/~sullrich