Going back to basics first, with the captive portal disabled, can the VLAN access the internet? Without a connection to the internet behind the captive portal, the page will never load. (DNS)

Nope. Code is on github.

@jp_redbeam: We actually found the solution to the issue in: https://forum.pfsense.org/index.php?topic=62173.0 Be careful, that thread is talking about an issue that existed with a very old pfSense version. Most of the code has changed by now. (never ever use an old version - even experts don't)

Even better, you could get rid of Wordpress altogether…  :P

You need a small transit network between the 1941 and pfSense WAN.  Then you put your LAN users behind pfSense LAN.  You don't need an interface on LAN on the 1941. The captive portal has to be between the edge router and the clients. It can't just be some server sitting on LAN.

This is something I had to look at for a customer last year, in the end I ended up using my website, and using a cURL command in PHP to log e-mail address into a MySQL database.

the answer is YES. im actually doing it. and also i use a wireless router after my pfsense and my devices redirects to captive portal (just not a dd-wrt tho) but still, i think pfsense will sill redirect devices to its captive portal. but to be sure, just turn off DHCP on your router then plug your pfsnse to one of your router's LAN ( again LAN not WAN) ports and you'll be good to go.

Using the default 'auto generated' certificate as an admin access, this is ok. You will see a big warning that the certificate isn't signed by a major 'certificate ware house', but, what the heck, you as an admin, you don't care. Using the same certificate for "guest access" (Captive portal) isn't ok. You will present these warnings to your guests , that's not good. You saw this https://forum.pfsense.org/index.php?topic=63791.0 - it will explain you how to get a REAL 'good' certificate for your Captive portal. If you're using https on captive portal, you do NOT want to use a self-signed certificate, but a real one. I'm using https login on my Captive portal for years now. Works great, and I use a certificate offered by StartSSL, costs 0 $ and just works (have to make a new one every year)

Well …. I guess you have your reasons to do so. /etc/inc/voucher.inc - look for "function voucher_write_used_db($roll, $vdb) {" and disable what it is doing ....

http://www.dmasoftlab.com/cont/home PS: Google is your friend.

@ssphoenix: The PFsense is providing the dhcp requests on the circuit routing all users through the 10.0.180.10 gateway (wan side). Eeeeeeeeeh?  :o :o :o

So I found that if you use allowed hostname instead of allowed IP, you can specify a direction for the exception. You can only do one host at a time, but I think that is OK for my purposes. Doing some further testing, then going to put it into production. Thanks all for your answers. I'll reply back if it doesn't work as expected.

There is no pfSense-API. There is the PHP script that you already use ….. so .... ;)

WAY too much emphasis in the pfSense world at getting one "box" (node) doing everything. 1 from for that. additional GRE tunnel over ipsec, that way you get an interface what should work. L2TP/IPSec would be the way to realize this. Internet –- pfSense(Voucher-CaPo) =====IPSec-Tunnel===== RemoteFirewall(nonPfSense) --- Guests 10.0.220.0/24 One Question from me onto this, why not both sides are using then a pfSense firewall with Captive Portal? A small PC Engines APU is really able to hold this pfSense based Captive Portal for many users.

Thank you Derelict, so simple, yet exactly what I was looking for. Works like a charm.

One user or multiple users.  There is no "limit a voucher to n users" other than n=1 or n=as-many-as-use-the-code. And even then it's a portal-specific setting, not a voucher-specific setting.  pfSense won't do what you want.

And many SMS and payment gateways must have been integrated too ? There is no payment gateway! We were talking about the following, "sending vouchers as SMS" to the clients, and nothing else. So, can I get the links, so I can simply see how its done and replace it with my API. The solution shown under this link is written in PHP and I really don´t know what you can do with it rewriting or what ever. The only thing is that many peoples inside of an german administrator forum are using this together with pfSense to send the vouchers as a SMS to the clients! Not more and not less. And I started the download, its an iso file of 108MB. ??? Hm, I really have downloaded it twice and it is only 1 Megabyte (MB) size! Voucher Generator So, it needs to be installed on a windows PC or Linux PC and the system needs to be always on to serve the hotspot ? Description The Software manages Voucher for the pfSense Captive Portal in a MySQL-Database

@NickM: Hi guys, Is there a way to make the vouchers expire automatically after a period i select instead of after the minutes assigned are used? Building up user groups and then set the lease time for each user group likes, Group 1 = 30 minutes Group 2 = 1 hour and so on so you can easily control the lease time of the vouchers.