Search the m0n0 mailinglist. It has been discussed there in depth. Some accesspoints don't pass individual MAC-adresses along or modify IPs on passthorugh (doing NAT).

Btw, ever opened one of these Accesspoints that you can buy? Lot's of them have a minipci or even cardbus card in there that are wired to the antenna with a pigtailcable (for example see http://www.ralphfowler.com/links/dwl900.html for some shots of an open dlink AP with pccard at the bottom of the article).

man route:
route add 0.0.0.0 mask "nettmask" "gw"
and to delete
route delete 0.0.0.0 mask "nettmask" "gw"

I was able to virtually eliminate this problem with the following quick-n-dirty shell scripts.
It's assumed that you stop+start olsr on bootup via /usr/local/etc/rc.d/olsrd.sh
These scripts will periodically reset the wireless interfaces, plus restart olsr every three days because it has a slow memory leak if using olsr's MID functionality.

#!/bin/sh

Save file as: /usr/local/etc/rc.d/batch.sh Required: chmod 555 /usr/local/etc/rc.d/batch.sh

/root/ath0.sh &
/root/ath1olsr.sh &

#!/bin/sh

Save file as: /root/ath0.sh Required: chmod 555 /root/ath0.sh

ps -x >/tmp/batchath0.txt
if grep -qi "sleep 3600" /tmp/batchath0.txt
then echo "found myself already batched."
else
sleep 3600
fi
ps -x >/tmp/batchath0c.txt
if grep -qi "sleep 3600" /tmp/batchath0c.txt
then echo "found myself already batched."
else

this forces an interface reset.

ifconfig ath0 burst
#ifconfig ath0 down
#ifconfig ath0 up
sleep 2
/root/ath0.sh &
fi

if olsr crashed/halted then restart it.

ps -x >/tmp/batchath0b.txt
if grep -qi "olsrd" /tmp/batchath0b.txt
then echo "found olsr doesn't need restart."
else
olsrd -f /var/etc/olsrd.conf &
fi

#!/bin/sh

Save file as: /root/ath1olsr.sh Required: chmod 555  /root/ath1olsr.sh Required: chmod 555  /usr/local/etc/rc.d/olsrd.sh

ps -x >/tmp/batchath1.txt
if grep -qi "sleep 300000" /tmp/batchath1.txt
then echo "found myself already batched."
else
sleep 300000
fi
ps -x >/tmp/batchath1.txt
if grep -qi "sleep 300000" /tmp/batchath1.txt
then echo "found myself already batched."
else

this forces an interface reset on backbone (5.x/etc).

#ifconfig ath1 burst
#ifconfig ath1 down
#ifconfig ath1 up
#sleep 2

this restarts olsr because it has a slow memory leak. Or, reboot.

/usr/local/etc/rc.d/olsrd.sh
/root/ath1olsr.sh &
#reboot
fi

FreeBSD would have released a advisory if it was an issue because some of the code is borrowed from the madwifi project.  I have seen no such advisories so I wouldn't sweat it until we see one.

Well me and programing don't go tryed it and failed. I have found this if anyone knows what they are doing and wants to tinker.

http://www.freebsd.org/cgi/man.cgi?query=ural&sektion=4&manpath=FreeBSD+6.0-RELEASE

http://damien.bergamini.free.fr/ral/

http://rt2x00.serialmonkey.com/wiki/index.php?title=Main_Page

http://www.ralinktech.com/ralink/Home/Support/Linux.html

I guess we will have to see what freeBSD do or if someone devlops a more reliable driver.

That is right. All bridgemembers have to be up.

Interesting, maybe these parameters could just be integrated into the gui?

Try to change Router's IP addresses.
Some ADSL modems uses IP address 192.168.1.1 and probabbly you are trying to connect on modem instead of your system.

Running completely unencrypted is dangerous, even with macadress filtering. macs are easy to fake and to sniff. I would do it in the following way:

Connect the AP in bridge mode to an OPT-Interface enable macfiltering at the AP for your photoframe and other wlanclients enable Captive Portal at the OPT1 with no user (upload a nice "you won't get in here!" page with no authentication form) add captive portal mac adress passthrough for the macs you need (your photoframe and your notebook or whatever client you need) enable the dhcp-server at OPT1 and add static MAC/IP assignments. enable deny unknown clients and enable static ARP configure the PPTP-Server and setup a user to be available to tunnel in add a firewallrule at opt1 to only allow the IP of the photoframe to access the ports and servers needed at LAN add a firewallrule to allow your pptp client anywhere

This makes it only harder to get through. It doesn't grant absolute security. Now your Photoframe can only go to the photo storage and your notebook is vpned to lan and is part of your lan subnet. This traffic is encrypted (though pptp is not the best encryption one could get).

That error suggests that the EEPROM could not be read, try to disable ACPI perhaps.

Kill radiusd in status > services, start it again via the shell using /usr/local/etc/raddb/radiusd -x, I believe that is how you start radius in debugging mode.  There is no need to sniff when radius will tell you if it gets anything.  you may have to execute it with an X in caps though, I don't remember.  But ocassionally radius will recieve packets but ignore them, most commonly when it doesn't feel that the incoming packet is from a valid client device.  It sounds like you got it fixed, but this is a much easier way of troubleshooting radius for future reference.

Use the captive portal mac filtering option.

Well, you can only solve this for traffic passing through or to the pfsense box - simply enable and require some form of VPN, either IPSEC or OpenVPN.

Will do, thanks Hoba :)

Thanks, I'll give that a shot later this week.

Ok then thank for answering so quick. Look forward to the next few releases then :)

Happy to open that door, if he'll contact me PM'd here.

Love to see the card work.

If you want to have both subnets (wireless and lan) in the same broadcastdomain and the same subnet you use bridgeing. If you want different subnets you use routing. As you have different subnets you want to use routing. Did you setup appropriate firewallrules to make traffic pass and all clients use the correct gateway and have an IP from the correct subnet?

By all means MAC filtering is VERY weak, but I have in my list as just another step to crack.  If you want in badly enough and have the time anyone and everyone can get into any wireless network, but why not make it that much more fun for a wireless hacker IMO.