Pfsense, No internet when it is said "You are connected".

Novacom

Sorry for the delay, I somehow was made aware of replies only this morning...

@free4 Yes I think the patch against current versions could mitigate the issue.

The issue was becoming less urgent since my client dropped the idea of using captive portal. Still, I think we must have a way to fix the issue while waiting 2.5.0 to get current. Reboots might be more frequents in some installations and manual interventions (flush database) should be limited.

Thanks

free4

@Novacom @Tenshou as requested, i have restored the patch.
The previous URLs should be working now

Finotto

@stephenw10
Your answer saved me, This worked for me, I'm using version 2.4.5-RELEASE-p1.

Patch: https://github.com/pfsense/pfsense/compare/RELENG_2_4_5...Augustin-FL:fix-reconfig-for-2-4-4.diff

amanfredini

I've tested on version 2.4.5-RELEASE-p1 but patch doesn't apply. There isn't any checkbox in captive portal page

Gertjan

I'm running :

The patch URL :

The title == the URL for me.

The patched can be cleanly reverted for me, which implies it is applied right now.
So it should applied.

This patch does not modify the visual part of GUI like adding a button.

It will retain the info in the ipfw tables, which represent connected users if you have to edit/save captive portal settings while users are logged in. The issue with 2.4.5-p1 (and some previous version) was that these tables would be emptied, so users would be blocked by ipfw and redirected to the captive portal page. Upon reaching the login page, pfSense find the user already in the "list with connected users" and shows a simple "You are connected" message.
Btw : the list with connected users is the list you see in the GUI :

It will empty the list with connected users when booting.

soheil.amiri

@Gertjan
thanks for your reply
but i could not apply the patch.

the patch is not even loaded for apply !!!!!

Gertjan

Patches - many exists - have to be added by the admin.
That is : you.

Press the green

Button.

Add :

Where URL/Commit ID shoud be something meaningfull, like the URL sired above.

The description can close to anything. I tend to copy the URL there also.

Now, iyt's time to hit the

button.

Then you 'Fetch' the patch. This loads the file that contains the patch (== automated editing of one or more files). That should confirmed it went well.
Then you should 'Test' the patch - to see if it could patch (files are as expected / correct versions, etc).
Then you hit "Apply", which should mention it worked well.
Done.

It's a click-> paste -> paste -> click -> click -> click -> click thing ;)

soheil.amiri

thanks @Gertjan
i uncheck the "Ignore Whitespace" and add the patch.
i work's for me. tahnks

RaymondChauke

@Gertjan said in Pfsense, No internet when it is said "You are connected".:

I am using Ubiquity Nano Station M2 plugged into PFsence PC Network via Rj45 cable... but it does not send me to captive portal and it reports that there is no internet.... What can i do?

Gertjan

Need more details.

The device that says : "no internet" ; what is :
DNS ?
Gateway ?
IP ?

When you hook up your device, do you see the lines in the DJCP server log that shows pfSense attributed an (correct ?) IP to the device ?

When you de-activate the portal on pfSense, your device says "Connected to Internet" ?

What are the firewall rules on the LAN you use ?

1ntr0v3rt3ch

do we still need this patch for 2.5 version?

Gertjan

@1ntr0v3rt3ch

Noop.
Test for yourself : connect as a portal user, using, for example, your phone.

On the pfSense, GUI goto the portal settings, change something, like adding a minute to the hard or soft time out (whatever) and save the settings.
The portal restarted.
Your phone is still connected.

1ntr0v3rt3ch

@gertjan

nice! thanks sir! I'll remove this system patches. I just updated my pfsense 2.4.4 p3 to 2.5 earlier.

Leopoldo

Hi guys,
I am testing the new version 21.02 with captive portal and I see that the message "You are connected" keeps appearing. and then it is not possible to navigate.
This happens when I remove power from the device, simulating a power outage.
Also, the problem is that the script that disconnected everyone connected is not working properly. The patch no longer works.
Has anyone tested this?

Fenil

@leopoldo I have tested too and it is happening in 21.02 version and 2.5.0. If you restart the router by gui than it will clearer the captive portal user but if you take out the power out or any power failure, than it will stuck on "you are connected".

Leopoldo

Yes, You are right. When the message "you are connected" appears, the solution I have found so far is to restart the device. After this, it is already possible to connect.
I think it would be necessary to create a script that detects the power outage. And when the power comes back, correctly reboot the device.

Gertjan

@leopoldo said in Pfsense, No internet when it is said "You are connected".:

I am testing the new version 21.02 with captive portal and I see that the message "You are connected" keeps appearing. and then it is not possible to navigate.

You man that, after loggin your logged in users are shown by the widget

and

?

Can you check if :

When rebooting, in the console, do you see this message :
Reconnecting users to captive portal PORTAL-NAME .... done?
When you obtain an IP from the portal's DHCP setting - is it the same as the one before the reboot ?
What is your "Concurrent user logins" setting ?

Check the portals 'ipfw' firewall rules right after reboot :
These two tables : PORTALNAME_auth_up and PORTALNAME_auth_down : is your device's IP and/or MAC listed ?
Like :

.....
--- table(PORTALNAME_auth_up), set(0) ---
192.168.2.102/32 f6:f2:a2:34:ff:53 2014 6214 628233 1614580040
......
--- table(PORTALNAME_auth_down), set(0) ---
192.168.2.102/32 2015 6137 5792181 1614580015
.....

@leopoldo said in Pfsense, No internet when it is said "You are connected".:

This happens when I remove power from the device, simulating a power outage.

That's the fault of the developers ;)
These guys never ripe out the power of a live system.
The always have controlled shut downs as they use UPS's, they can't stand it to loose there edits if something goes wrong.
They also assume a clean environment as the system boots. Because the contrary would open the door for billions of possible issues ....

IMHO, still, your seems question is right to me.

@leopoldo said in Pfsense, No internet when it is said "You are connected".:

The patch no longer works.

The patch based on 2.4.5-p1 ?
Look at the patch. it isn't just a matter of lines to be added, modified or to be deleted. It doesn't so blindly, but it checks for a exact 'before' situation, so it knows it can change the exact code. Not some 'throw in a line here and there'.
Patches are always version dependant.

Workaround ( ? ) :

If you don't have a UPS, consider turning this option off :

When you reboot pfSense yourself, activate this option. And de activate it when the reboot is done.

@leopoldo said in Pfsense, No internet when it is said "You are connected".:

Also, the problem is that the script that disconnected everyone connected is not working properly.

You mean this one :

It should works.

Btw : the scripts behind this button is the same that is used to re create the firewall rules if logged in user should be preserved. This scripts reads the database file that contains the details of every client that is connected. If it can't be read correctly, that would explain your situation very well.
These "PHP SQLITE database" files are the first ones to be corrupted when things go bad (== non controlled system shut downs) and should be discarded upon reboot.
Easy fix : do not use the "preserve" option.

Btw : didn't test this situation my self yet. Not gona press the reset button or remove .on this system I've nearby as it is used right now.

@leopoldo said in Pfsense, No internet when it is said "You are connected".:

And when the power comes back, correctly reboot the device.

If it's possible to detect a reboot after a non-clean shut down, deleting the "logged in captive portal user database" would do the job.

Leopoldo

Hi @gertjan, I just tested the "Preserve users database" option. Indeed, the message "you are connected" no longer appears. And users can connect without problems after a simulated power outage. This is a good news!
In summary, if these tests are correct. Patch and scripts would no longer be required in version 21.02.
I will continue testing. Thanks for your support.

1ntr0v3rt3ch

@leopoldo

yes! script is not needed anymore in 2.5.0 and 21.02 as @Gertjan response in my query. Using 2.5 in my home setup.

Leopoldo

Hello @1ntr0v3rt3ch and @Gertjan, Have you tested simulating a power outage?
In my case, I have been testing version 21.02 and was able to reproduce the problem again :(
This problem is solved by successfully restarting the device.
The script that disconnects connected users also works.