pfSense

Blocking a MAC address in pfSense when using a mask is not working. However, if you use the pass option and specify the same mask, it works fine.

So when you add the mac with a mask for example 12:34:56:00:00:00/24 and select block you can still access the captive portal, authenticate and then browse the internet.

When you add the mac with a mask for example 12:34:56:00:00:00/24 and select pass I can browse the internet immediately without having to authenticate against the captive portal, as expected.

When you add a single MAC address without a mask and select block you get redirected to the Blocked MAC address redirect URL. So you know blocking does work but just not when using masks.