Downloads keep going on when logout(manual or idle/hard timed out)

[mendilli]

I happened to see that when downloading files, even if I log out manually or by idle/hard time out,  I expect them to stop but they keep downloading ,
is there anybody else having this issue, and have a solution?

Edit: I am using version 2.1.5

[Gertjan]

Hi,

I just tried this : I started to download a huge file from here: https://www.kernel.org, the latest linux kernel source, and when I rechead about 10 %, I disconnected myself.
The downloading stopped.
IE was even complaining about if after a while.

I guess that your real problem is this number : "2.1.5" (which is dead version for many reasons), change it for "2.2.2" and check back.

Note : only experts should keep old versions, they are nuts enough to auto-support it  ;)

[mendilli]

thanks for the reply, but I have to stick with 2.1.5, because of some major mods that I have made, and while trying 2.2.2 ı am dissappointed with squid and squidguard, I think I will have to wait until they are working properly

[mendilli]

is there any body to help me deal with this problem, I believe it is related to kill_states commands in captiveportal_disconnect function in captiveportal.inc, this command seems to be not working, and I know you will offer me to use the latest release, but as I said I need squid and squidguard fully functional with cp authentication, which is broken in the latest version

this is the function with the red lines for killing states

/* remove a single client according to the DB entry */
function captiveportal_disconnect($dbent, $radiusservers,$term_cause = 1,$stop_time = null) {
global $g, $config, $cpzone;

$stop_time = (empty($stop_time)) ? time() : $stop_time;

/* this client needs to be deleted - remove ipfw rules */
if (isset($config['captiveportal'][$cpzone]['radacct_enable']) && !empty($radiusservers)) {
RADIUS_ACCOUNTING_STOP($dbent[1], // ruleno
$dbent[4], // username
$dbent[5], // sessionid
$dbent[0], // start time
$radiusservers,
$dbent[2], // clientip
$dbent[3], // clientmac
$term_cause, // Acct-Terminate-Cause
false,
$stop_time);
}

if (is_ipaddr($dbent[2])) {
/* Delete client's ip entry from tables 1 and 2. /
$_gb = @pfSense_ipfw_Tableaction($cpzone, IP_FW_TABLE_DEL, 1, $dbent[2]);
$_gb = @pfSense_ipfw_Tableaction($cpzone, IP_FW_TABLE_DEL, 2, $dbent[2]);
/ XXX: Redundant?! Ensure all pf(4) states are killed. */
$_gb = @pfSense_kill_states($dbent[2]);
$_gb = @pfSense_kill_srcstates($dbent[2]);
}

/*

• These are the pipe numbers we use to control traffic shaping for each logged in user via captive portal
• We could get an error if the pipe doesn't exist but everything should still be fine
  */
  if (!empty($dbent[1])) {
  $_gb = @pfSense_pipe_action("pipe delete {$dbent[1]}");
  $_gb = @pfSense_pipe_action("pipe delete " . ($dbent[1]+1));

/* Release the ruleno so it can be reallocated to new clients. */
captiveportal_free_dn_ruleno($dbent[1]);
}

// XMLRPC Call over to the master Voucher node
if(!empty($config['voucher'][$cpzone]['vouchersyncdbip'])) {
$syncip  = $config['voucher'][$cpzone]['vouchersyncdbip'];
$syncport = $config['voucher'][$cpzone]['vouchersyncport'];
$syncpass = $config['voucher'][$cpzone]['vouchersyncpass'];
$vouchersyncusername = $config['voucher'][$cpzone]['vouchersyncusername'];
$remote_status = xmlrpc_sync_voucher_disconnect($dbent, $syncip, $syncport, $syncpass, $vouchersyncusername, $term_cause, $stop_time);
}

}

[unixaccent]

Hi there! I am also one of the many who is waiting for Squid and Squidguard to work in Pfsense 2.2.x. This tutorial "https://www.youtube.com/watch?v=xk60lg-9o3A" works only in 2.1.5. I just thought it is worth sharing.

[Gertjan]

One solution that make you issue work:
Back-port the actual code too your pfSense installation.

From what I recall, the removal of firewall rules was buggy back then (2.1.5) so they repaired it - which introduces new versions.

You you don't want do 'deal' with it (because you can't), but you have the need to have your pfSense modified without being upgraded: switch to this sub-forum https://forum.pfsense.org/index.php?board=34.0 (be SURE that you read the rules FIRST).

Be ready to find out that the 'repair' will break squid …...