:(i need some help with my CP templates..im suck on web design..can u help me check my templates coding  ? :(

you'd have to use radius accounting for that.
i'm sure there are numerous posts on this forum about accounting

Portal interface are meant to accessed by humans who use web navigator devices.
xbox's shouldn't be on a network with such an interface.

Take down the portal interface or be ready to type son MAC's.
Better yet, slide in another NIC in yout pfSEnse box and make a OPTx 'xbox-only' network segment.

And before you ask: no, sorry, a filter like "Are you an xbox, then go ahead" doesn't exists.

tnx for answer :D

I'm using a remote syslog-ng server configured with a mysql backend.  From there, I have cron triggered scripts that e-mail me statistics on all captive portal events.

Solved the problem by connecting the LAN by OpenVPN and checking the option  'Disable MAC filtering'

Thank you

It's probably nothing to worry about, especially if you use captive portal.

What happened is that someone's browser attempted an HTTP POST with a lot of data but instead was redirected to lighttpd on pfSense. Usually that's from the captive portal. It's mostly harmless.

You can turn off the logging of messages from lighttpd under the system log settings.

It's all in the config.xml, you can take a backup from Diag > Backup/Restore and copy/paste it however you want to the new zone. Then restore the edited config.

Working if change an part the code existent for it:

vi /etc/inc/captiveportal.inc

Code:
if (!function_exists('getNasIP')) {
/function getNasIP()
{/
        global $config, $cpzone;

if (empty($config['captiveportal'][$cpzone]['radiussrcip_attribute'])) {
                        $nasIp = get_interface_ip();
        } else {
                if (is_ipaddr($config['captiveportal'][$cpzone]['radiussrcip_attribute']))
                        $nasIp = $config['captiveportal'][$cpzone]['radiussrcip_attribute'];
                else
                        $nasIp = get_interface_ip($config['captiveportal'][$cpzone]['radiussrcip_attribute']);
        }

if(!is_ipaddr($nasIp))
                $nasIp = "0.0.0.0";

return $nasIp;
}

anyone to do this ?  image submit button?  is not work! any idea?

Thanks for the prompt reply.  I will try that.
Jodel

@Derelict:

Not really.

It sounds like you want to prevent people from having access to your LAN assets until they are authenticated.  Captive portal doesn't do that.  802.1X does.

If you want pfSense/captive portal to do it, you have to place the protected assets on one pfSense interface (LAN segment) and the users on another and control access with firewall rules on the interface to which the users connect.

If they must be on the same LAN segment, pfSense can't help.  You have to use a managed switch and something such as 802.1x to control access at layer 2.

Many thanks for your answer and very sorry to reply very very late.

I have finally managed to setup captive portal,
I must mentioned that it was with use of 802.1x and  separate interfaces.
I tried Vlan approach on on pfsense's Lan interface but that was really taxing on my box.

thanks