Those settings only affect the RADIUS server configured for captive portal auth. We don't have a setting in the user manager that does the same function (yet). For 2.2, those will likely be merged into the main RADIUS config in the user manager, but for now the settings on CP are just for CP.

@zcache: @kolomalo: Hi all. Perhaps this is not the correct way to do this, so sorry. I use CP to block websurfing to unauthoriced users, but would be desirable to allow some services to cross CP (like smtp, rdp, etc), since I haven't configured a DMZ, to permit some servers to connect to internet, but without websurfing. So will be a good improvement to allow to config some services to cross CP without authentication (something like "allowed hostames" tab, but with ports ;) ) Great job!! Many thanks!! I think if you just need block web surfing, I have new choice for your consider. let you see squid+squidGuard package, it can handle for block and bypass the website by user password and you also can specific the ip group. it easy over than CP.   ;D mmmmm yeah,, Now, I'm thinking that use CP to block only web surfing is not a good idea… But I didn't wanted to create too much rules...and Cp is too easy :D

Yes I can resolve the problem I clicked on the "view the current page" in the captive portal and I save the source code, and changed <title>Hotspot  Gare</ title><br />and it's OK</title>

I had these symptoms when I had inadvertently set the DHCP lease time to be LESS than the idle-timeout - logged-in user number would just keep growing until I restarted the CP service. [image: status_rrd_graph_img.png] [image: status_rrd_graph_img.png_thumb]

@pat1974: To solve this issue I go in "Services: Captive Portal" In the tab: Allowed IP addresses, I add the IP:23.1.173.15 This tells the Captive portal that when this address is being contacted it doesn't need to go through portal authentication. In this way you allow traffic to a single IP address but www.apple.com resolves to many. Here for example it resolves to 2.23.109.15: #host www.apple.com www.apple.com is an alias for www.isg-apple.com.akadns.net. www.isg-apple.com.akadns.net is an alias for www.apple.com.edgekey.net. www.apple.com.edgekey.net is an alias for e3191.c.akamaiedge.net. e3191.c.akamaiedge.net has address 2.23.109.15 maybe you have to define an 'Host Override' in Services->DNS Forwarder

Thanks I have upgraded.

hmm, I am running nanobsd. If I choose to manually upload a new firmware, will that update the second slice and leave my original install untouched? I really want to be able to go back quickly if something doesn"t work as expected. Thx

That's not a BSD-ism, on a full FreeBSD install that all works practically identical to Linux. It's the way we handle PHP that is special. We only load what we need, since we have to target smaller platforms that have less memory.

Its an issues being looked with current 2.1 snapshots. Should be fixed by next week.

The box i'm running pfsense on has 8 Ethernet connections so it has wan/lan and 6 opt interfaces. When i speak about switching is i have replicated the config on each interface and when i physically switch it comes back. I corrected this and it's ok also i found where the units where asking for the rebind attack and correct that as well. However i still have the host is down dnsmasq error. Have you found anything new on your side on this?

This has been fixed on 2.0.3 the only way to fix is to gitsync there. On 2.1 just go to a newer snapshot.

perhaps something like that? http://doc.pfsense.org/index.php/FreeRADIUS_2.x_package#CaptivePortal_Self-Registration:FreeRADIUS.2B_MySQL

NO its not I just not pasted the whole results. Also will it resolve the issue of 2.0.2 ? I will do your suggestion and give feedback, TIA @bardelot: Instead of using gitsync to upgrade 2.0.2 to 2.0.3 you should use the built in firmware upgrade feature as gitsync does not update the binary files. You can get update files and full 2.0.3 test images here [1]. Is it the complete output of the "ipfw show" command? There are no default rules. [1] http://forum.pfsense.org/index.php/topic,58203.0.html Edit: Moved my post from the duplicate topic in the "2.1 Snapshot Feedback and Problems" board.

hi, its not working for me, im using mac address to pass via portal and its not working, the only thing that works is that when you put the ip address of the said station. Can anyone help ?

Might be an old top lsense, but still hadn't figured it out :) Thanks for sharing! I'll give it a try.

Depends, what does your infrastructure look like now?

Beautiful, thanks.