TTL Value Change for Captive Portal
There is a rule in for Postrouting of an interface like LAN or Bridge or captive portal that will change their TTL value to ttl=1
So that rule in firewall is called mangle.
Our setup is for pure for selling internet to certain people and we don't want them to share Internet to people who don't want to pay a small amount for a whole month
Wanted to apply the same config for the pfsense
You swa "Mangle" and "postrouting" which means an iptables is in play.
iptables == Linux only.
From what I know, the firewall pfSense uses (based on FreeBSD != Linux) can not / doesn't permit us to modify the portal network's outgoing packet so it's TTL gets reset to 1.
Not by using the GUI.
CLI : I don't know - guess not.
Btw : I saw this question subject several times on this forum.
And https://lists.freebsd.org/pipermail/freebsd-net/2005-April/007098.html (ok, this is old.)
Maybe a question for FreeBSD itself, there where they develop pf and ipfw, as both are just for the captive portal.