Set the authentication to "No authentication" and upload CP HTML that doesn't include any fields but contains the appropriate form submit button somewhere. (You can test with the stock HTML.  When "No authentication" is selected, the fields are ignored.) You also have to make sure your CP hard timeout is shorter than your DHCP lease time and your DHCP pool is large enough to handle peaks. I believe you should be able to use the Pre-authentication redirect URL to redirect to your external web server and have that page include the proper Submit to the captive portal but I don't know why you'd do that.  I'd just have pfSense do the portal page.  You can host/link to heavy content outside if you have the proper Allowed IP Address/Hostname entries.

I just upgraded to 2.1. so on 2.0 ipfw tables were used as follows: Table 1 authenticated/allowed clients (IN) Table 2 authenticated/allowed clients (OUT) Table 3 allowed ‘from’ IPs without bw limits (IN) Table 4 allowed ‘from’ IPs without bw limits (OUT) Table 5 allowed ‘from’ IPs with bw limits (IN) Table 6 allowed ‘from’ IPs with bw limits (OUT) Table 7 allowed ‘to’ IPs without bw limits (IN) Table 8 allowed ‘to’ IPs without bw limits (OUT) Table 9 allowed ‘to’ IPs with bw limits (IN) Table 10 allowed ‘to’ IPs with bw limits (OUT) now on 2.1 : Table 1 authenticated/allowed clients (IN) Table 2 authenticated/allowed clients (OUT) Table 3 allowed IPs (IN) Table 4 allowed IPs (OUT) is it correct ? thanks.

Same problem here with: 2.1-RELEASE  (i386) built on Wed Sep 11 18:16:50 EDT 2013 FreeBSD 8.3-RELEASE-p11 Takes 20 sec. - If I use a manual "post-auth" page - then it jumps to it right away.

A reinstall solved whatever problem was there, thanks anyway

Here ist the ZIP file with all images for my proposal. Please remove the .txt captiveportal-images.zip.txt

Did you check https://redmine.pfsense.org/ for an open ticket which addresses that and if not - open a ticket? But probably the developers are now focused on pfsense 2.1

No, sorry. Once again, captive portals are broken by design as you've observed. And no, pfsense will not force any OS to launch a browser.

ok :) the problem is that I don't how to program it. Which language? bash? another way…is it possibile to open the users db and insert it directly? it should be more simple if possible.

Just to follow up, it was not the captive portal blocking webmail but the hosting company blocking traffic from the IP attached to the pfsense machine. Weird. They claimed too many unsuccessful login attempts to an email account.

Check the system, dhcp, and portal auth logs to see if there are any messages/errors at the time of the redirect. Sometimes that can happen if you have the portal's hard timeout set longer than the DHCP lease time and it can't properly re-use the sessions.

You should not just "view source" of the portal page, edit it, and then upload it. In doing so, the page loses some important internal macros. You should edit the original modified source, or attempt to "fix" the tags that were lost. See the sample code for a default portal page to see what those are, things like <form method="post" action="$PORTAL_ACTION$"> and and other such things that may have been used.</form>

@ermal: It is better to use the php commands to do the disable rather than the not correct shell commands provided here. Take a look at what happens when you click enable/disable button on the CP configuration page. Another easy way to do it would be tojust leave captive portal running and insert/remove a rule (using the IPFW command) to skip the portal rules.

another thing to check: if your external database is on a hosted server, make sure that you are allowing connections from your pfsense IP address. e.g. in Control Panel (on your hosted server) go to Databases -> RemoteMySQL and enter the allowed host IP or domain name

If you want seamless authenticated access, use PPPoE to connect to pfSense instead of a captive portal.

sorry ,i don't found it !

Dude, your RADIUS server is just completely off-topic here. Start a new thread.

Yes, you have to manually edit the values in /etc/inc/radius.inc. They're easy enough to spot - if you're not comfortable with command-line just use Diagnostics > Edit file. Look for a line like the following… function addServer($servername = 'localhost', $port = 0, $sharedSecret = 'testing123', $timeout = 3, $maxtries = 2) I've not yet got to the bottom of my problem - increasing the timeouts has not fixed it for me. Unfortunately I've had little time to look into it further, and it's always in use so access is tricky.