Pfsense, No internet when it is said "You are connected".

johnpoz · Jun 17, 2019, 3:50 PM

How is it we have people still on the 2.3 line - and not even the latest in that line?? That whole 2.3 line has been EOL and was warned about it for well over a year.

if anything why are you not on 2.3.5p2 ?

A Former User · Jun 17, 2019, 3:56 PM

@johnpoz

yeah its true that it has been EOL. maybe its just a personal preference for some of us to used that version (users using 2.3.2) and maybe some users don't want to upgrade :)

A Former User · Jun 18, 2019, 1:46 AM

@jurhein

using the shellcmd and script is working perfectly after pfsense reboot. all connected users in captive portal are disconnected and need to login again. (this is for 2.4.4 p3 without replacing the captiveportal.inc (from master)

when i tried to replaced the captiveportal.inc it and reboot my pfsense and login again my voucher. voucher login success but its not diplaying the voucher i am using in my captive portal status and number of users connected is 0.

jurhein · Jun 18, 2019, 3:51 PM

proof that may captiveportal fix [pfsense 2.4.4 p3]
edit captiveportal while users are login
reboot pfsense and re-login [captive portal status and number of users connected is not 0]
credits to @Gertjan

https://www.youtube.com/watch?v=ffZYJ3iBS10

A Former User · Jun 18, 2019, 3:31 PM

@jurhein

that fix is using the php file (captiveportal_disconnect_all.php), and yes that is perfectly working after rebooting the pfsense.

how about the file (captiveportal.inc) that you replaced using the captiveportal.inc(master) in this link: https://raw.githubusercontent.com/pfsense/pfsense/master/src/etc/inc/captiveportal.inc

when i tried that replacing via winscp. logged in captive portals is not showing in the captive portal status and no. of users is 0. you've post in this thread that you replaced it with a new captiveportal.inc from the said link.

A Former User · Jun 18, 2019, 3:40 PM

@jurhein

actually that fixed is from @Gertjan. kindly give some credits to him.

:)

Fenil · Jul 1, 2019, 6:17 PM

Hey the patch work but when we have power cycle like if we manually take off the power and do power on than again its says that "You are connected"

Gertjan · Jul 2, 2019, 9:55 AM

Lucky you.
When you power cycle, you could also wind up having a bad file system. pfSense wouldn't even boot up correctly.

When pfSense boots, the logged in user database will be cleared, which means : no users connected.
This was never a problem / worked as it should.
Seeing this message after booting is a complete new issue. Without further details it will remain unanswered.

wazim4u · Jul 13, 2019, 10:50 AM

@Gertjan I have patched 2.4.4-P3 with your instructions and it successfully patched. and its working as desired. only problem i am getting is no connected user showing in captive portal status.

Gertjan · Jul 13, 2019, 4:21 PM

Be carefull, guys.

As I stated above, I use :

Again : applied against "2.4.4-p3" with updated (current Master) /etc/inc/captiveportal.inc

That file could have been changed, as it's part of the actual pfSense version in progress (upcoming 2.5.0). So, what worked back then, might not be doing so anymore.

Coping and replacing files, ok, but be ready and able to debug if needed.
(Or wait for an upcoming version to have it included)

bLitZerg · Jul 15, 2019, 1:42 PM

@Gertjan said in Pfsense, No internet when it is said "You are connected".:

Update :

I re applied the patch https://github.com/pfsense/pfsense/pull/4042.diff (this is the "patch ID" I used).

/etc/inc/captiveportal.inc was complaing with one chunck (the 12th one) because in "master" there is a new function :
function captiveportal_reserve_ruleno($ruleno)
so I decides to make a backup of my /etc/inc/captiveportal.inc and and replace it with the master version ( https://raw.githubusercontent.com/pfsense/pfsense/master/src/etc/inc/captiveportal.inc ).

Now, the patch applies perfectly well.

Great work !

Again : applied against "2.4.4-p3" with updated (current Master) /etc/inc/captiveportal.inc

hello guys, really badly need your help. I'm running pfSense 2.4.4p3 on an XCP-ng hypervisor. I already enabled captive portal. And it redirects well to the CP's landing page whenever i connect my mobile device. Unfortunately there's still no internet connection after I logged in. Here's what I did so far:

XCP-ng:

disabled interfaces (WAN/LAN) tx offloading.

pfSense 2.4.4p3

defined DNS servers with corresponding gateways for my WAN & LAN.
disabled DNS Resolver
enabled DNS Forwarder
enabled DNS override to disable localhost (127.0.0.1) as DNS server.
enabled captive portal.

That's all i did so far. & followed Gertjan's solution. But still no luck.

Hope you can help me guys. If you still got tricks hidden in your sleaves... I will really be grateful if you can share to me to solve this problem of mine.

TIA.

bLitZerg · Jul 15, 2019, 12:41 PM

@Gertjan hello my friend. I followed your instruction on how to troubleshoot this problem. But got no luck. Can you send me the captiveportal.inc you used so that i can test it in my system? I badly need your help.

TIA.

Gertjan · Jul 15, 2019, 1:43 PM

This :

@bLitZerg said in Pfsense, No internet when it is said "You are connected".:

Unfortunately there's still no internet connection after I logged in

is your problem, right ?

This :

@bLitZerg said in Pfsense, No internet when it is said "You are connected".:

disabled interfaces (WAN/LAN) tx offloading.

isn't portal related.
De-activate the portal : the interface gives an Internet access ?

This is where everything goes down hill :

@bLitZerg said in Pfsense, No internet when it is said "You are connected".:

defined DNS servers.....

Quick solution : don't. Out of the box, things work. Then people try hard to break their DNS. DNS, is, for the captive portal, must work as a clock.
So, no (not your defined) DNS, Just the Resolver as it was set out out of the box. Check for yourself that the portal works right away.
Now start breaking things, and then undo your last setting to get a stable situation.

with corresponding gateways for my WAN & LAN

What ?
Screen capture please ?

@bLitZerg said in Pfsense, No internet when it is said "You are connected".:

disabled DNS Resolver

Why ??
(although, this might be part of a solution that could work)

@bLitZerg said in Pfsense, No internet when it is said "You are connected".:

enabled DNS Forwarder

Forwarder ? Ok, but why ? You sold your DNS requests to some company ?
(What, you give this information to them for free ?? )

@bLitZerg said in Pfsense, No internet when it is said "You are connected".:

enabled DNS override to disable localhost (127.0.0.1) as DNS server.

Coool !!! Now pfSense itself can't even check for updates, package info etc.

@bLitZerg said in Pfsense, No internet when it is said "You are connected".:

enabled captive portal.

Try this : take a pfSense setup with default settings - and make work WXAN (only WAN !).
Now, set up the captive portal as the video, there are 3 official vidoes => Youtube => Netgate.
Enjoy this for some time.

Then, before continuing, explain us what you are trying to do with DNS , Why should it change ?

Btw : as the trouble page states : what are the firewall rules on the Captive portal interface - typical an OPTx interface and not LAN.

Btw : the most know issue, of course, is people mssng up their DNS :

Also : your question has nothing to do with this thread : subject : Pfsense, No internet when it is said "You are connected".

jvelez88 · Aug 27, 2019, 5:58 PM

I can confirm this behavior.
In my current setup at an office we only use de Accept Terms login (no password or ticket involved), when an employee leaves the office at the end o f his work time, the next they they would come to find the "you are connected" message. The only bypass I could find is to set the client expiration time to 10 hours, enough so everybody would have to re-accept terms next day, and if after that the issue still happens I just go to the CP Status page and delete the client, then disconnect their wifi and reconnect.

Ive got no clue why this is happening, the issue with this problem is that you cant create a totally unattended setup.

Gertjan · Aug 28, 2019, 10:49 AM

@jvelez88 said in Pfsense, No internet when it is said "You are connected".:

The only bypass I could find

There are two others ways to bypass the issue :

The most easy one : stop saving the portal config. Do not change the configuration => the firewall doesn't get reset => all is well.
Apply the patch.

sox1600 · Oct 6, 2019, 12:52 PM

I have similar issue, i'm using v. 2.4.4 p3. how effective this patch? what are the expected issue may occur? Thanks.

stephenw10 · Oct 6, 2019, 1:14 PM

It is effective if that is actually the issue you're hitting.

Steve

sox1600 · Oct 6, 2019, 1:14 PM

@stephenw10 sorry don't know where to find the System \ Patches page.

johnpoz · Oct 6, 2019, 1:22 PM

@sox1600 said in Pfsense, No internet when it is said "You are connected".:

don't know where to find the System \ Patches page.

Really???

I take it you get bit by a lot of snakes, since you don't see them ;)

sox1600 · Oct 6, 2019, 1:32 PM

@johnpoz need to install it under the Package Manager :-) I got this error:
"Patch Fetch Failed" i used this URL: https://github.com/pfsense/pfsense/compare/master...Augustin-FL:patch-captivportal-reconfigure-no-configbump.diff