TTL Value Change for Captive Portal

[wakasavan]

There is a rule in for Postrouting of an interface like LAN or Bridge or captive portal that will change their TTL value to ttl=1
So that rule in firewall is called mangle.
Our setup is for pure for selling internet to certain people and we don't want them to share Internet to people who don't want to pay a small amount for a whole month
https://www.youtube.com/watch?v=QYBLXzGhPQQ
Wanted to apply the same config for the pfsense

[Gertjan]

Hi,

You swa "Mangle" and "postrouting" which means an iptables is in play.
iptables == Linux only.

From what I know, the firewall pfSense uses (based on FreeBSD != Linux) can not / doesn't permit us to modify the portal network's outgoing packet so it's TTL gets reset to 1.
Not by using the GUI.
CLI : I don't know - guess not.

Btw : I saw this question subject several times on this forum.

https://forum.netgate.com/topic/152379/how-to-change-captive-portal-ttl-value/2?_=1606902129387
And https://lists.freebsd.org/pipermail/freebsd-net/2005-April/007098.html (ok, this is old.)

https://forum.netgate.com/topic/9813/rogue-access-points?_=1606902129390

Maybe a question for FreeBSD itself, there where they develop pf and ipfw, as both are just for the captive portal.