Portal interface are meant to accessed by humans who use web navigator devices. xbox's shouldn't be on a network with such an interface. Take down the portal interface or be ready to type son MAC's. Better yet, slide in another NIC in yout pfSEnse box and make a OPTx 'xbox-only' network segment. And before you ask: no, sorry, a filter like "Are you an xbox, then go ahead" doesn't exists.

tnx for answer :D

I'm using a remote syslog-ng server configured with a mysql backend.  From there, I have cron triggered scripts that e-mail me statistics on all captive portal events.

Solved the problem by connecting the LAN by OpenVPN and checking the option  'Disable MAC filtering' Thank you

It's probably nothing to worry about, especially if you use captive portal. What happened is that someone's browser attempted an HTTP POST with a lot of data but instead was redirected to lighttpd on pfSense. Usually that's from the captive portal. It's mostly harmless. You can turn off the logging of messages from lighttpd under the system log settings.

It's all in the config.xml, you can take a backup from Diag > Backup/Restore and copy/paste it however you want to the new zone. Then restore the edited config.

Working if change an part the code existent for it: vi /etc/inc/captiveportal.inc Code: if (!function_exists('getNasIP')) { /function getNasIP() {/         global $config, $cpzone; if (empty($config['captiveportal'][$cpzone]['radiussrcip_attribute'])) {                         $nasIp = get_interface_ip();         } else {                 if (is_ipaddr($config['captiveportal'][$cpzone]['radiussrcip_attribute']))                         $nasIp = $config['captiveportal'][$cpzone]['radiussrcip_attribute'];                 else                         $nasIp = get_interface_ip($config['captiveportal'][$cpzone]['radiussrcip_attribute']);         } if(!is_ipaddr($nasIp))                 $nasIp = "0.0.0.0"; return $nasIp; }

anyone to do this ?  image submit button?  is not work! any idea?

Thanks for the prompt reply.  I will try that. Jodel

@Derelict: Not really. It sounds like you want to prevent people from having access to your LAN assets until they are authenticated.  Captive portal doesn't do that.  802.1X does. If you want pfSense/captive portal to do it, you have to place the protected assets on one pfSense interface (LAN segment) and the users on another and control access with firewall rules on the interface to which the users connect. If they must be on the same LAN segment, pfSense can't help.  You have to use a managed switch and something such as 802.1x to control access at layer 2. Many thanks for your answer and very sorry to reply very very late. I have finally managed to setup captive portal, I must mentioned that it was with use of 802.1x and  separate interfaces. I tried Vlan approach on on pfsense's Lan interface but that was really taxing on my box. thanks

Hi there, I have same problem with captive portal and vlan wi-fi http://forum.pfsense.org/index.php/topic,70417.0.html contact me: nghongnguyen@yahoo.com

Same thing happened to me but my LAN was em0 and my WiFi was em0_vlan10. My fix was the create a vlan for the LAN and then add the LAN interface to that vlan so my LAN was em0_vlan5 and my WiFi was em0_vlan10. Everything is working correctly now. I'm glad your problem is solved I thought I should just throw this out there just incase some one reads this post later on.