when i tried to run the page to stop service from console via

php /usr/local/www/status_services.php mode=stopservice service=captiveportal

I got error : i got Potential DNS Rebind attack detected, see http://en.wikipedia.org/wiki/DNS_rebinding Try accessing the router by IP address instead of by hostname.

Can you suggest me a way to do it? Thanks

Thx you all for the help.

I've got it working.
I create a 31 bit key with openssl

I found a youtube tutorial: http://www.youtube.com/watch?v=aO0KxzigeLY&feature=endscreen&NR=1

Part 1 and 2 did it for me. i copied:

1. openssl genrsa -out private.key 31

2. openssl rsa -in private.key -out public.key -pubout -outform PEM

It took me a while to figure this out but it works.

I only copied and pasted the key's and left everything as it was.

Result: 6 chars

Thx

Yeah i thought about a hard timeout,  Our users don't pre-buy time,  it's done on a per minute basis,  and i could see them getting annoyed if they are on skype and get disconnected every 30,  For now i'm just going to continue to operate on the honor system,  tell the 30 min users that they have 30 minutes, and to please watch their own time,  if they go slightly over the 30 I won't charge them extra,  but if they go too much over, heck it's only $2.50 for another 30 mins.

But i'd love to find a workaround.

Just found this, it seems to require much more efforts than just inserting the address as in the post auth…. http://forum.pfsense.org/index.php/topic,34148.0.html
:o

I'm connected by cable to try (I'm configuring the server), but the disconnect and connect, and still the same.
Thanks.

A bit late i know, i was browsing to find some answers too, so just in case someone have this problem too, go to Services>>Captive Portal and enter the website you want the person to be redirected to in the field named "After authentication Redirection URL", don't forget to put the "http://" on front of the "www" or it won't work…. :)

{ie:  http://www.yyy.com}

Yes thanks Noobie, that's a really great link you shared and just what i was needing, i choose the one posted by te user "lol" customising it a bit, however, there are also other great looking works there, thanks again!  ;D

I found the problem. It's due to security fixed on Mac OS 10.7.2 that require to check the certificate revocation list before load any https page. One of the solution is to bypass the the IP address of the CRL and OCSP of the certificate issuer in captive portal.

with squid + lightsquid or squid + sarg you can log sites
with squid + squidguard or squid + dansguardian you can filter sites/block sites

Disabled the Logout popup window on captive portal and is working fine on all browsers…

Thanks guy's, i'll take the advice and stick with notifying the customer.

Many thanks for your help, but the problem is still persist. Now I think to refresh the installation with a new one, and retry the procedure step by step.

Best regards

Disabling MAC filtering in Captive Portal settings worked for me.  The repeater was affecting the MAC-IP relationship for the client trying to log in.

"If this option is set, no attempts will be made to ensure that the MAC address of clients stays the same while they're logged in.This is required when the MAC address of the client cannot be determined (usually because there are routers between pfSense and the clients)."

Dear fluca1978 ,

Thanks for your reply.

@fluca1978:

@steelmax11136:

1.    LAN only Vlan10
2.    LAN output Vlan tagging and trucking enabled to distribute across the network

My question here is: If WAN come from a Vlan given by CoreSwitch will I be able to make output from LAN to give Same VlanID & DHCP given by CoreSwitch + with Captive portal?

@steelmax11136:

3.    Pfsense should be able to talk Windows AD & Radius Server Which are in Vlan5

Dear its possible since I succeeded in testing environment but was without vlans…
My question here is that how I am gonna make Pf-sense talk windows AD which is in vlan5 to since Pf-sense is in vlan10.
***Note: I know how to setup captive portal to authenticate against win AD. I just don't know how to link the in a vlan trucked environment.

@steelmax11136:

5.    Do I need Dual WAN eg: Vlan5 & Vlan10

I really have no Idea on how to make and use single interface for vlans can you plz give me a link to a guide for these steps.
Is that I can use single WAN or Do I have to Use Dual WAN. To make pf communicate Vlan 5 & Vlan10?

I thank you for your valuable time. Thank You a lot!  :)

Thank a lot….I succeeded as you said...God bless u..

Sounds like what usually happens when the users on that interface can't use DNS. If you are specifying external DNS servers in the DHCP config, make sure you have them set on the 'allowed ip addresses' tab of CP.