Yah@laoistom:

Once the network connection is made your going to get an IP address regardless of whether or not you have gone through the captive portal page.

Yeah, I cannot see exactly what's the bug here, plus what's been "fixed" on the other thread, the patch is completely unrelated.

Another Idea

1 - Edit the new file .html with name  captiveportal_cpzone.html

2 - Stop de Service CaptivePortal

3 - Sign  in Server Pfsense with WinSCP or Putty (shell line access, Option 8)

4 - Go to Directory /var /etc , delete the old files .html and add your new files (Directory Content Files HTML)

5 - Go to Directory /usr /local /captiveportal and delete file .jpg and add your new file .jpg (this directory storage files .jpg)

6 - Start the Service CaptivePortal

:)

Answer on "is this feature documented somewhere" ;)…

nevermind this, I got this sorted using freeradius package.

Normally it should work correctly.
I am not sure if the sysctl to enable ipfw on a bridge is considered correctly though, you might need to set that yourself.

Just to check: you inverted the images representing LAN and WAN, right ?

The DHCP4 didn't get an IP …... as shown in the image. So your pfsense setup has no Internet access.
But, if it gets an IP, what range will it be ? It should NOT be a 192.168.1.x

Well,

Toy a little bit with the two time-out settings (hard and soft) and you'll understand quickly how they interact.

I'm on 2.1-Release and also have this problem. Did anyone ever get it resolved?

I've never had captive portal enabled on this box before. I just set it up and if I set a redirect URL in the config then it redirects to that just fine. If I don't set it though, the URL is http://ip.of.box:8000/$PORTAL_REDIRURL$ after I put in the correct voucher and it there is no redirection.

Fixed thank you.

If you select captive portal authentication on squid3-dev, you do not need any extra script. Squid logs will have username and client ip.

with further tests I verified the referrer not to be the original URL, ie it seems the original PORTAL_REDIRURL is not made available using "After authentication Redirection URL".

EDIT. Ok, my bad, the redirurl is indeed in the HTTP_REFERER.

With some minor string parsing the redirurl can be extracted and used:

$REFERER = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : ""; $arrUrl = parse_url($REFERER); parse_str($arrUrl['query'], $arrVar); $redirURL=$arrVar['redirurl']

You need to put the two DNS ip's in the "allowed IP" section in the captive portal.

I also found that I had to add www.apple.com into "allowed hostname" to get iPhones/pads through the captive portal. (Only when using a different DNS)