@rhy7s: Have you considered Gargoyle Router instead? You could set up a fairly hands-off quota and throttle system. No, I need a captive portal to control and log access by user account, regardless of what computer or device they're using. Right now Zeroshell seems to be working, so I don't want to upset things.  If Zeroshell's rudimentary logging becomes a problem then I'll revisit other solutions like pfSense.

The place I used one, it was attached directly to a windows PC. It could not attach to pfSense. What you'd normally do is export a roll of vouchers from pfSense to a CSV file and them import it into windows somehow (e.g. LO Calc, Excel, etc) and then print them to the printer from there in a batch, and then have them hand out the slips as needed. If you want "on demand" printing where the vouchers are not printed until they're requested, that's a lot harder. It would involve a program on the front desk PC that could trigger the printing of just one voucher at a time from the roll. Possible, but not as simple as pre-printing them. Someone else here may have better advice for that.

I had the same problem here. output of pkg_info | grep mysql is: mysql-client-5.5.21 Multithreaded SQL database (client) mysql-server-5.5.21 Multithreaded SQL database (server) After running: touch /etc/php_dynamodules/mysql /etc/rc.php_ini_setupphp -m | grep mysql mysql mysqlnd /etc/rc.restart_webgui No result. But when I restart the webconfigurator bij the menu (option 11)  phpinfo() gives me a positive I guess a bug

An alternative to this is to use an IP address of the NTP server instead of its hostname :) or Make sure that your NTP server hostname is resolvable by your DNS server. it should boot faster.

@Nachtfalke: Or adjust the DHCP lease times. But the lease time should not be lower than the hard timeout set on CP. Ok I will try this. My hard time is 30 minutes. I gave lease time 2000 seconds.

I'm not sure what the relation is between both code dumps? Can you give us some more information? Can you see that the actual post request is done``` ($.post('captiveportal-x.php', $("#testform").serialize());) To see this you need to change the return of function 'mycall' instead of 'false'

ok, ipfw is used to manipulate the stateful firewall, found that.  so when I executed the ipfw command to delete two rules concerning a test mac, the firewall did indeed deny outbound and inbound access to the machine without logging into the captive portal. Now, one would think that the passthrough mac address page would, when refreshed, show that this mac has been deleted, but no.  so obviously the information is being cached somewhere.  Even though it showed as a pass through mac, ipfw had successfully (of course) deleted the rule.  When I edited the mac entry, and saved it, it went back into the ruleset for ipfw. Question remains:  where is this information cached?  is it encrypted?  Standing by…...  :)

I just tested voucher codes from roll0 and roll1 which I generated nearly two years ago.  None of the voucher codes were reported invalid. I wonder what is different about your test.

NO. That you can enforce with proxy servers like squid etc…. You can install the squid proxy and have that done but ssl traffic still cannot be modified like that.

Reverse portal functionality is not implemented. Also the sms workflow needs development to be integrated in pfSense since there is no tool today to send sms from CP itself.

I found the problem, I was using the default login page for the pfsense. The problem is that if you use the default login page, the method and post attributes of login form are marked as comment in html e.g . I removed the comment from the tag, now it is working fine.

I do actually store a couple cookies on the users device when they come through the portal.  As my portal asks for their name, postcode and email as they passthrough, I store these in a cookie so when they return another day, the form is already populated with their details and a message "are these details correct" is shown.  I could use these cookies to see if the user had been logged though already based on the cookies timestamp. Still not had chance to have a play yet.

the AP are connected in layer2 to its controller in network 192.168.1.x Only the controller (appliance) have an ip address 192.168.1.10, all the AP haven't ip because they operate in layer2 with the controller. My pfsense server have the wan on 192.168.2.x, both the Vlan (192.168.2.x and 192.168.1.x) are routing and managed by a layer3 switch. My pfsense server have the lan on 192.168.100.x and it is the DHCP for that lan. When I connect smartphone/laptop to the wifi-guest vlan(192.168.2.x) the device obtain the correct configuration by the dhcp server of pfsense (192.168.100.x) but when i try to navigate the browser report "timeout". When I connect laptop to the wifi-guest vlan with the cable the device obtain the correct configuration by the dhcp server of pfsense (192.168.100.x) and when I try to navigate the browser go to the captive portal page, I insert the voucher and the session start correctly So, the problem is certainly due to the controller but I do not understand what's wrong, on the controller I activated a external captive portal and I insert 192.168.100.1 and 192.168.2.1 (the lan and wan ip of pfsense) but still not work. ok guys, I resolved myself the problem. In controller setup I change the network class and now works!!!!!!!! :) I still have another little problem, when open the browser you are redirect on captive portal login page, but if your default browser's page is httpS:\xxx the browser don't redirect automatically, but if you enter an http://xxx web site the redirect works again. anyone has any suggestions?

Check this blogpost out. The blog got other nice pfsense posts about captiveportal and openvpn as well. http://blog.stefcho.eu/?p=754

Well, managed to upgrade the master node to 2.1 too. So both nodes are running on 2.1. Voucher synchronization still not working - after I fill Voucher database IP, sync port, username, password and click Save, no error is shown, no synchronization is done and the "Voucher database synchronization" fileds are empty. Also I see Zones in Captiveportal, but haven't seen where I can fill the zone name?

Thanks… I somehow didn't see it. I set that portal up a year ago and never change anything there. Did the change remotely, so I didn't see the result, but it's probably fine. I already had the /22 network as trusted as a workaround, but reverted that setting.