pfSense

When a passthru mac entry is deleted, the pipes associated with the entry are intended to be removed, followed by the rules that reference them. With the switch to pf-based captiveportal, there are some number of bugs in the captive portal code that are preventing this from happening. As a result, removed hosts are still able to pass traffic even though they should be disallowed from the portal, and the system accumulates more configured dummynet pipes that are unused.