mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Integrate patch sent to m0n0wall-dev by Peter Allgeyer:

Browse Source 
we have configured the captive portal to authenticate users against a
Radius server with reauthentication every minute. When using the MAC
Pass-Through feature, we have problems reaching hosts on the WAN side on
other ports then port 80. The log says, that the connections passes the
filter, but tcpdump tells me that the packet never reaches the next hop
router.

I've found some messages in the captive portal log, which make me
believe, that it has something to do with radius reauthentication:

Apr 22 18:18:20 RADIUS_DISCONNECT: unauthenticated, 00:02:a5:fa:b9:35,
192.168.1.198
This commit is contained in:
Scott Ullrich 2008-04-27 21:30:00 +00:00
parent b4d6d69c6e
commit cd8219dfbc
1 changed files with 26 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
etc/inc/captiveportal.inc
View File

@ -461,6 +461,10 @@ function captiveportal_prune_old() {
$timedout = false;
$term_cause = 1;
/* no pruning for fixed mac address entry */
if (portal_mac_fixed($cpdb[$i][3])) {
continue; // check next value
}
/* hard timeout? */
if ($timeout) {
if ((time() - $cpdb[$i][0]) >= $timeout) {
@ -1095,4 +1099,25 @@ function getNasIP()
return $nasIp;
}
?>
function portal_mac_fixed($clientmac) {
global $g ;
/* open captive portal mac db */
if (file_exists("{$g['vardb_path']}/captiveportal_mac.db")) {
$fd = @fopen("{$g['vardb_path']}/captiveportal_mac.db","r") ;
if (!$fd) {
return FALSE;
}
while (!feof($fd)) {
$mac = trim(fgets($fd)) ;
if(strcasecmp($clientmac, $mac) == 0) {
fclose($fd) ;
return TRUE ;
}
}
fclose($fd) ;
}
return FALSE ;
}
?>