try squid3-dev, marcelloc has added a feature for captiveportal authentication with non transparent proxy, whit this feature squid now gets the username from captiveportal and content filtering with captiveportal usernames by squidguard is now possible, the only issue is to force the clientsto use proxy and it can be done by using wpad/pac function my solution is 1-use non-transparent proxy 2-block everything except proxy 3-force clients to use autoproxy via wpad/pac feature or set browsers to use my proxy manually 4-so if a client does not configure his browser to use my proxy or not set it to autodedect the proxy, he can not access internet 5-all the web based software must be configured to use proxy too 6-use squidguard to apply content filtering by captiveportal usernames The one and only problem I am facing is, some java applets(especially games) does not work behind squid, but  it can be solved by adding allow rules for every domain that java wants to connect using firewall rules and aliases, and setting the connection method to "direct connection" in windows java settings and also if you have some php skills, you can modify marcelloc's solution in squid.inc and squid.xml files to be used for transparent proxy too

Hello! Sorry for my English!  :-[ Where is it all change? You forgot to specify the path to the halyards … I have exactly the situation as the author of the post. But an adequate solution and nenashel. I would be very grateful for any help.  :)

Hi Diaste, Which patch did you install? Please advise Thank you,  :)

Hi Leoshen, same issue as mine,  ;D waiting for the fix at 2.1.1 http://forum.pfsense.org/index.php/topic,67203.0.html https://redmine.pfsense.org/issues/3216

Thanks Bro onlineph for the clear explanation. :) So I think we have to manually add new Roll, everytime the tickets runs out.

thanks heper for reply its not work.  its working just with Google Chrome and Mobiles.  Internet Explorer And Mozilla are dead. any idea ?

Solved by http://forum.pfsense.org/index.php/topic,67677.0.html

Thanks for the reply. I don't have pfSense installed yet. Just trying to see what I can do with it. I'll be using WHMCS and their FreeRadius module to control access.

An other PFSense user's having this trouble https://redmine.pfsense.org/issues/3226 and I solved my problem with this fix. This is due to Radius Protocol Option, which was reset to no authentication during the upgrade. I select the protocol that I use with my 2K8 and now the system work ! :)

Perhaps something like this: http://wiki.freeradius.org/modules/Rlm_smsotp pfsense CaptivePortal which is using freeradius as backend.

Thanks everyone for the help. It appears it was two issues. One was I did not allow my DNS server out and the other is I had fastforwarding turned on. Thanks again!