@dhatz:
The problem with the malformed URL in the 302 redirect seems to have been fixed, however I've noticed several other CP issues:
Pass-through MAC doesn't seem to be work. I've checked that the CP adds the usual pair of "allow ip from any to any MAC xyz" ipfw rules at the top of the ipfw ruleset), yet the hotspot ssl login dialogue is still displayed.
Quick feedback:
CP asks for a voucher code from MACs in the passthrough list, apparently due to "set 0" / "set 1" issue:
00002 204 63503 set 0 allow ip from any to any MAC aa:aa:aa:aa:aa:aa any
00003 173 20884 set 0 allow ip from any to any MAC any aa:aa:aa:aa:aa:aa
00004 0 0 set 0 allow ip from any to any MAC bb:bb:bb:bb:bb:bb any
00005 0 0 set 0 allow ip from any to any MAC any bb:bb:bb:bb:bb:bb
00006 0 0 set 0 allow ip from any to any MAC 00:ff:12:34:56:99 any
00007 0 0 set 0 allow ip from any to any MAC any 00:ff:12:34:56:99
65291 0 0 set 1 allow pfsync from any to any
65292 0 0 set 1 allow carp from any to any
65301 628 28888 set 1 allow ip from any to any layer2 mac-type 0x0806
65302 0 0 set 1 allow ip from any to any layer2 mac-type 0x888e
65303 0 0 set 1 allow ip from any to any layer2 mac-type 0x88c7
65304 0 0 set 1 allow ip from any to any layer2 mac-type 0x8863
65305 0 0 set 1 allow ip from any to any layer2 mac-type 0x8864
65307 0 0 set 1 deny ip from any to any layer2 not mac-type 0x0800