Bug #8441

Manually disconnecting a captive portal user leaves the IPFW table entry

Added by Jim Pingle almost 2 years ago. Updated over 1 year ago.

Captive Portal
Target version:
Start date:
Due date:
% Done:


Estimated time:
Affected Version:
Affected Architecture:


When a captive portal user is manually disconnected their entry is removed from the portal database, but the entry remains in the ipfw table (Check ipfw table <name>_auth_up list)

Some more debugging from the forum:

(pfsense 2.4.3-RELEASE (amd64))
When a user press the disconnect button, in /usr/local/captiveportal/index.php (line 151) calls the captiveportal_disconnect_client function. This function first removes the information about the session from the captive portal database (file /etc/inc/ line 1098), then the function captiveportal_disconnect (line 1104) is called. In captiveportal_disconnect, before removing an ip from the ipfw tables (lines 1038-1041), it is checked (lines 1035, 1036) whether this ip is logged. Because the information about the session is removed from the database, it bypass lines 1037-1041. As a result of this disconnection from the Internet does not occur.
I commented the lines 1035, 1036, 1042. The Captiva portal began to disconnect users.

I was able to reproduce the problem by logging into the portal and then disconnecting the user from Status > Captive Portal

Associated revisions

Revision 29a272f7 (diff)
Added by Selman ULUG almost 2 years ago

fix #8441;

ipfw rules must be deleted before cp record delete.

Revision 8228ea91 (diff)
Added by Selman ULUG over 1 year ago

fix #8441;

ipfw rules must be deleted before cp record delete.

(cherry picked from commit 29a272f7361689c87dd7ad9fc1c903e843a1c593)


#1 Updated by Anonymous almost 2 years ago

  • Status changed from Confirmed to Feedback
  • % Done changed from 0 to 100

#2 Updated by Chris Macmahon almost 2 years ago

tested on today's snap: 2.4.4.a.20180420.1016
removed item from the captive portal status page.
was removed from ipfw table.

#3 Updated by Jim Pingle almost 2 years ago

  • Status changed from Feedback to Resolved

#4 Updated by Jim Pingle over 1 year ago

  • Target version changed from 2.4.4 to 2.4.3-p1

Also available in: Atom PDF