pfSense

Change to a pfsense page which includes a username and password

We need to keep-state on the allowed MAC address rules.

Allow src and dst mac's

Correctly add the mac pass through rule

Correctly add the mac pass through rule

Skip to rule 65535 since its the last allow all from any to any rule

pass through mac entries should always exist. the reason
for this is because we do not have native mac address filtering
mechanisms. this allows us to filter by mac address easily
and get around this limitation. I consider this a bug in
m0n0wall and pfSense as m0n0wall does not have native mac...

No fast-cgi.

Go back to mini_httpd but keep maximum processes

Full path to ipfw

Allow pfsync and carp traffic.

FAST_CGI is reporting false client ip's. Switch back to non-fastcgi.

Round memory sizes down. Make consistent.

Ticket #540

• same changes from [6378] to the changes adopted in [6297]
• cleanup comments

Ticket #540

Be more conservative on the number of fast-cgi processes

Be more conservative on the number of fast-cgi processes

Turn off fast cgi on memory strapped systems

Pass correct parms

• Introduce get_memory() which returns amount of memory in the machine
• Use memory to control how many processes will be running and waiting for captive portal authenticaion

Allow setting of max fast-php children

Minor nit-picks

• Additional tuning parms
• Support captive portal SSL

Convert captive portal over to Lighty.

Many benfits:

• No longer forking web server
• No longer a 16 user simultaneous login limit
• Fast PHP will make it fly!

Reset back to pfSense state

Sync with m0n0wall 1.2b9's captiveportal.

spello

Spello in comments

Fix a XXX

Add reverse captive portal feature.

• Remove debugging echo.
• ruleno should now be the ip.

Typo

Do not run expiretable if timeout == 0

Correctly output table contents

We're already calculating for *60

Correctly utilize expiretable

expiretable takes seonds as argument. Times the minute count * 60

Use the expiretable utility and pfctl to deterimine when a client has timed out

Various code cleanups and a few actual bugfixes courtesy of Zend

Correct usage of arp.

Actually disconnect a user correctly

Enforce hard timeouts

Correct portal arguments by appending \ before *

Swap images

Use arp table to deterimine when we need to flush an old captive portal user from the pf table <captiveportal>

Update (C)

Convert captive portal over to use pf tables.

TODO: Figure out how to deterimine when the last activity time of the user was.

• Minor cleanup, almost entirely of bootup messages.

Add $Id$ tag

Import m0n0wall 1.2b7's captive portal code WITH user manager.

And the crowd goes wild.

• Restore pfSense custom portal page
• Add back pre 1.2b6 headers in each file

Restore 1.2b6's captive portal.

Restore pfSense's custom starting page.

Sync with pascals latest

Move /etc/rc.prunecaptiveportal from minicron to cron

Restore the pfSense default captive portal page.

Add local user manager code imported from Pascal Suter's m0n0wall developers group message.

Update default captive portal page.

Synchornize with m0n0wall 1.2b3. These files have not really been
modified too much so a straight copy works. 9 files remain to be
patched by hand.

Initial revision