Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense, No internet when it is said "You are connected".

    Scheduled Pinned Locked Moved Captive Portal
    168 Posts 34 Posters 56.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      If you're using the same settings as I posted above then it would only not apply if the files have already been modified or it's not 2.4.4p2 (so the files are different).

      You see the same error details?

      Steve

      1 Reply Last reply Reply Quote 0
      • O
        ohbobva
        last edited by

        I just upgraded to 2.4.4-RELEASE-p3 and now I'm experiencing this issue. Has the fix not made it into released versions, yet?

        F 1 Reply Last reply Reply Quote 1
        • F
          free4 Rebel Alliance @ohbobva
          last edited by

          @ohbobva no...sadly, Netgate didn't included the fix in 2.4.4-p3 :/

          1 Reply Last reply Reply Quote 1
          • J
            jurhein
            last edited by jurhein

            The real cause of this problem is that when the cellphone/laptop become out of wifi signal range
            for example you login to the captive portal page [there is internet connection]
            but when you turn off the wifi of cellphone/laptop then you re-open it
            it will reconnected but there is no internet, when you look at
            pfsense gui still connected but the cellphone has no internet,
            i am hoping they fix this bug
            i downgrade my pfsense to version 2.3.2 [no bug]

            S 1 Reply Last reply Reply Quote 1
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              Going to need more than "has no internet."

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • M
                MTNet
                last edited by

                We have over 100 pfsense deployments in the field and are encountering this issue as well.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by johnpoz

                  Really you have 100 installs of pfsense in the field and the most you can add to the information about the problem is

                  +1

                  WTF??????

                  Sorry but BS!!!

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  M 1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Um, yeah, waaay more info required.

                    I assume you mean you log into the captive portal and it reports you are connected but you are still unable to reach external sites?

                    And you have tried the suggestions here?:
                    https://docs.netgate.com/pfsense/en/latest/book/captiveportal/troubleshooting-captive-portal.html

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • M
                      MTNet @johnpoz
                      last edited by

                      @johnpoz this is the whole problem with pf now. Unfortunately we do indeed have many of these. We do use these for CP. Users Macs/iPhones/androids all get the error that indeed says just that. Now we have another revision that feels like we are beta testing software and troubleshooting.

                      I indeed have more information about this is related to users that have logged in before and try again. The only difference on these boxes is the firmware update.

                      Instead of believing customers and helping solve their issues. Just saying BS. Why would we login to lie about an issue? This is an unfortunate turn.

                      M 1 Reply Last reply Reply Quote 1
                      • M
                        MTNet @MTNet
                        last edited by

                        @MTNet and the browers says you are connected but never by passes it and no internet if you close it. It’s the same problem detailed above..

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by stephenw10

                          But what problem are you actually seeing? Which post above are you saying you have the same problem as?
                          We can only guess at this point.

                          Edit: Ah,OK I see your second reply there now.

                          Did you try the patch suggested above?

                          Does it fail when the connection is lost or seemingly at random?

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • M
                            MTNet
                            last edited by

                            Once the user gets the page they always get the page. Reboot of the device and pfsense don’t clear it.

                            Honestly we have been migrating CP off of pfsense. So we didn’t spend much time troubleshooting. We’ve tried deleting it and recreating it all of the above short of downgrading.

                            We had some short term success upgrading and then the user reauthed the first time then later the issue can back.

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by Derelict

                              The point is anyone running 100 sites should be able to provide actual troubleshooting information instead of just saying "mine doesn't work either."

                              It takes time to build out a duplicate network that might (might) imitate the issue you are having.

                              If you are experiencing the problem then you already have an environment (or 100 of them, apparently) Where is the break down? Is it DNS? DHCP? Is it ipfw? Is it pf? does the captive portal entry still exist? Is the IP address/MAC address pair changing from the pair that was logged in? Anyone running 100 captive portals ought to know exactly what the pieces are necessary for the user experience. Which one is breaking?

                              Lots of possibilities there. At this point what is wrong is a mystery for lack of specific troubleshooting information provided.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • M
                                MTNet
                                last edited by

                                Did you read this forum? If you are familiar with these at all you would have most of the questions you just asked answered.

                                1 Reply Last reply Reply Quote 0
                                • M
                                  MTNet
                                  last edited by

                                  1. we have over 100 so it’s not isolated
                                    2 they stopped working with a recent update.
                                    3 you’re getting dhcp because you are getting redirected to the page that says your connected
                                    4 if it’s the first time logging in you connect fine. Not dhcp/ipfw/dns
                                    5 users are reporting that downgrading fixed their issue.

                                  Seems like a ton of technical information right there to me.

                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by Derelict

                                    Still nothing actionable. What did you contribute to a better understanding of the issue?

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator @MTNet
                                      last edited by

                                      @MTNet said in Pfsense, No internet when it is said "You are connected".:

                                      Seems like a ton of technical information right there to me.

                                      Actually ZERO of it!!

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                                      1 Reply Last reply Reply Quote 0
                                      • GertjanG
                                        Gertjan
                                        last edited by

                                        Well, we're talking about the "You are connected" bug, so, the why and what is known for months now.
                                        There was a solution, actually two solutions available as patches, one was abandoned and the remaining one isn't compatible with 2.4.4-p3 at the moment.
                                        https://github.com/pfsense/pfsense/pull/4042 - see the bottom.

                                        A initial work around works well, though :
                                        Do not edit portal settings when users are connected.
                                        Or
                                        If you have to edit portal settings , just hit this button after the edit :
                                        bf9b44ab-8c15-4ee9-88ca-d7bbf111d940-image.png

                                        No "help me" PM's please. Use the forum, the community will thank you.
                                        Edit : and where are the logs ??

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator
                                          last edited by

                                          That wouldn't be fixed by downgrading pfsense.. According to the redmine all version are affected by this bug.

                                          So he is saying he is editing the CP settings at 100 sites? To cause this?

                                          There is zero "technical" information provided by him..

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Mmm, editing the captive portal at every site seem unlikely at best.

                                            If that is the case though a better post would have been 'We are seeing the same symptoms described here: https://redmine.pfsense.org/issues/8616'.

                                            You say you have tried 'all of the above', does that mean you tried that patch and it didn't work for you?

                                            Steve

                                            GertjanG 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.