Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    captive portal to collect user info without authentication for guests at a restaurtant

    Scheduled Pinned Locked Moved Captive Portal
    18 Posts 4 Posters 4.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      Allowed IP Addresses
      Allowed Hostnames

      Those can be accessed pre-authentication.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      D 1 Reply Last reply Reply Quote 0
      • D
        DeanB_NYTS @Derelict
        last edited by

        @Derelict

        hmmmmmm i just tried it but that seems to bypass the captive portal entirely.

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          if you go directly to that URL yes.

          You don't have a lot of choices here. Host stuff inside the portal or pass it pre-auth.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • D
            DeanB_NYTS
            last edited by

            @Derelict please excuse my ignorance but please advise on the below:

            the portal is meant to show a HTML page witha simple form like this - http://mywifiportal.com/clients/Elea/

            i have uploaded the HTML to the PFsense SG-3100 device - but i can only add the HTML - not the assets (images, scripts, CSS etc)

            this portal posts the info to my email marketing service for the client.

            the issue is ---- all the assets dont load becasue they dont have internet acces becasue they arent authenticated.

            how can i get this portal page to be shown to users on the guest network and have their info pass to the hosted marketing solution.

            i really appreciate your help on this matter pfsense is new to me.

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              Screen Shot 2019-09-21 at 1.35.00 PM.png

              Assets uploaded here are available for use in your portal page.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 1
              • D
                DeanB_NYTS
                last edited by

                is there possibly a way to allow pre authention access out of the lan to an offsite address?

                GertjanG 1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by Derelict

                  @DeanB_NYTS said in captive portal to collect user info without authentication for guests at a restaurtant:

                  D
                  DeanB_NYTS 6 minutes ago

                  is there possibly a way to allow pre authention access out of the lan to an offsite address?

                  Yes. Allowed IP addresses and Allowed hostnames as I already described.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • GertjanG
                    Gertjan @DeanB_NYTS
                    last edited by

                    @DeanB_NYTS said in captive portal to collect user info without authentication for guests at a restaurtant:

                    way to allow pre authention access out of the lan to an offsite address?

                    Example :

                    On your captive portal login page, you could mention a "conditions" page that is hosted somewhere in the Internet.
                    I have a dedicated server running on the net with the web site of our company.

                    So I :

                    				<p><a href="https://www.some-site-on-the-web.tld/" class="linkExternal"><img src="captiveportal-nvx-logo.png" class="centerImage" alt="https://www.some-site-on-the-web.tld Logo" ></a></p>
                    

                    I added the some-site-on-the-web.tld URL to the allowed host name list :

                    a41c832f-ce6b-4580-ba5f-d94ff71cb29b-image.png

                    This method can also be used for other type of services, like a remote database, what ever ...

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    1 Reply Last reply Reply Quote 0
                    • D
                      DeanB_NYTS
                      last edited by

                      @Gertjan

                      Hmmm interesting I'll have to try this today. I assumed that "allowed hostnames" was for device names for DNS filtering instead of IP address. I didn't know it could be used for urls!?

                      So for instance I have most of portal running locally now because another person showed me where I can locally load my assets into the netgate. So if I can just allow the user to fill in the form I then just need to get the authentication scripts from the default portal to also load when they hit the submit button to send there form info.

                      GertjanG 1 Reply Last reply Reply Quote 0
                      • GertjanG
                        Gertjan @DeanB_NYTS
                        last edited by

                        @DeanB_NYTS said in captive portal to collect user info without authentication for guests at a restaurtant:

                        was for device names for DNS filtering instead of IP address. I didn't know it could be used for urls!?

                        URL (host names) or IP's : it's the same thing.
                        The only difference is that the URL (host names) will get resolved first.

                        Read https://docs.netgate.com/pfsense/en/latest/captiveportal/captive-portal-troubleshooting.html first.
                        Now, use the mentioned ipfw commands (console or SSH access, option 8) and check he captive portals ipfw rules for yourself.

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.