pfSense

Same here happened on snapshot 14December, 13 December, 8December.
So now I'm using December 1 snapshot.

Hello, the probleme is present for me too with build on : built on Tue Dec 14 05:32:26 EST 2010
and the probleme is not present befor to upgrad (with a snapshot from around the 3 or 4 decembre ?)
i don"t use any other package .... hope that can help

As a test, I have built a custom firmware image without the TSO patch that Chris mentioned. It would help us narrow down the problem if you could test with the appropriate firmware below to see if the portal works when using that image:

amd64 - http://pingle.org/files/pfSense-Full-Update-2.0-BETA4-20101212-2328.tgz

i386 - http://pingle.org/files/pfSense-Full-Update-2.0-BETA4-20101214-1319.tgz

If it works with that firmware image, then we will know it is related to the other open ticket (#1096).

Olé,

Jim P wrote:

(...) It would help us narrow down the problem if you
could test with the appropriate firmware below to see if the portal
works when using that image (...)

Thanks a lot.

However, I tested this firmware : it does not solve the redirection issue (the redirection to the auth page).

--
Thomas

Thomas NOEL wrote:

However, I tested this firmware (...)

Just for information : the captive portal works with pfSense-Full-Update-2.0-BETA4-20101201-2252.tgz

I will test the latest firmware (1202, 1203, etc) tomorrow (I'm in europe)...

Thomas NOEL wrote:

the captive portal works with pfSense-Full-Update-2.0-BETA4-20101201-2252.tgz

works with pfSense-Full-Update-2.0-BETA4-20101207-0051.tgz too...

Thomas NOEL wrote:

Thomas NOEL wrote:

the captive portal works with pfSense-Full-Update-2.0-BETA4-20101201-2252.tgz

works with pfSense-Full-Update-2.0-BETA4-20101207-0051.tgz too...

• pfSense-Full-Update-2.0-BETA4-20101208-0906.tgz = redirect to :8000 works
• pfSense-Full-Update-2.0-BETA4-20101208-2005.tgz = it does not

So, there is something new in "20101208-2005" which breaks packet forwarding...

What was new at that time is the patch that was backed out of the firmware updates I built above, and it will also be gone from the next new snapshot. I deactivated the patch in our repo and started the builders on a new run late this afternoon. It will probably be late tonight or early tomorrow AM before the new image sets are uploader, give it a try tomorrow and see if it works.

Tested pfSense-Full-Update-2.0-BETA4-20101216-0237.tgz : no redirection... :(

Does this update include the (anti-)patch ?

Yes, that update should no longer contain the patch in question. So it may not be related to that one after all.

Hello,

Found a solution : # /sbin/sysctl net.inet.ip.fastforwarding=1

I think the regression came from commit:4f76b144

Thanks

with 2.0-BETA4 (i386) built on Fri Dec 17 01:17:30 EST 2010
the Captive Portal still be broken for me ...

gerard grazzini wrote:

with 2.0-BETA4 (i386) built on Fri Dec 17 01:17:30 EST 2010
the Captive Portal still be broken for me ...

Can you try this (on a shell) : # /sbin/sysctl net.inet.ip.fastforwarding=1

It works for me.

Same problem here! As soon as I enable captive portal there is no redirect and no more internet access on that interface.

Using 2.0-BETA4 (i386)built on Thu Dec 16 14:34:04 EST 2010
same with 2.0-BETA4 (i386) built on Fri Dec 17 01:17:30 EST 2010

Haven't tried the shell command yet. Will try this later that day.

Thomas NOEL wrote:

Can you try this (on a shell) :

1. /sbin/sysctl net.inet.ip.fastforwarding=1

It works for me.

Hello Thomas,
thank you very much! The captive portal is working now.

What does that switch do? - Why does the captive portal work with that option enabled?

Thomas NOEL wrote:

Hello,

Found a solution : # /sbin/sysctl net.inet.ip.fastforwarding=1

I think the regression came from commit:4f76b144

Thanks

This is working for me also
Thanks Thomas for finding this

Ermal Luçi wrote:

Please test new snapshots it should be fixed.

I've just tested 2.0-BETA4 (i386) built on Fri Dec 17 14:14:00 EST 2010
(pfSense-Full-Update-2.0-BETA4-20101217-1036.tgz) : it does not solve the bug...

Thanks

That date is an hour before the fix was committed and comment here. "test new snapshots" always means a date of at least a few hours after, if not the next day.

I just upgrade to 2.0-BETA4 (i386) built on Sat Dec 18 09:51:58 EST 2010, and still the same problem.

Thanks

Hello,

I've tested today with pfSense-Full-Update-2.0-BETA4-20101219-0151.tgz (built on Sun Dec 19 05:36:18 EST) : bad news, the redirection to the captive portal does not work.

A difference : the hack "net.inet.ip.fastforwarding=1" does not work too.

Thanks

I fixed it right now.
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/4cc233748fa7e79ac743364404152b7685c81288

Beaware that fastforwarding and CP will never work together on pfSense from now on.

Ermal Luçi wrote:

I fixed it right now.
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/4cc233748fa7e79ac743364404152b7685c81288
Beaware that fastforwarding and CP will never work together on pfSense from now on.

Yes, it works !! Thanks a lot !