Nxfilter not working with pfsense captive portal

[varelasantiago]

I have a pfSense 2.6.0 server pointing DNS to NxFilter on Ubuntu Server, but I have a VLAN 51 that is WiFi for clients. When connecting, they are not redirected to the pfSense Captive Portal page, but if I remove the pointer to NxFilter, the Captive Portal page appears for clients.

On other VLANs that do not use Captive Portal, it is working normally.

My network:
pfSense: 10.10.1.2 (VLAN 1)
NxFilter: 10.10.1.8 (VLAN 1)
Administrative: 10.50.0.0/24 (VLAN 50) - working
WiFi: 10.51.0.0/23 (VLAN 51) - not working with Captive Portal

[support200]

Which DNS server the VLAN50 use?

[varelasantiago]

VLAN 50 is also using NxFilter DNS (10.10.1.8)... but it doesn't use Captive Portal; only VLAN 51 uses Captive Portal.

Both VLANs (50 and 51) are pointing DNS to NxFilter, but only VLAN 51 isn't working.

[support200]

I don't know much about your network settings. So, on NxFilter side, do you see the client IPs from VLAN50? And VLAN51 as well?

The captive portal works on DNS redirection and HTTP redirection as far as I know. So, you may have to use pfSense as the DNS server in that case.

NxFilter also can be used for a captive portal. I redirects Unauthenticated Browser requests to its login page. And there are better ones like AD integration or SSO agents or 802.1x WiFi authentication: https://tutorial.nxfilter.org/doc/en...entication.php

However, you can't have both of them do User Authentication.

[varelasantiago]

Yes, I see both networks (50 and 51) in LOGGING > DNS REQUEST.

Also, I can't access my file server via DNS (\\srvdados), for example. I can only access it via IP (\\10.10.1.5)... so I'll have to install NxFilter on pfSense itself.

Thanks for your help.

[support200]

Where do you have 'srvdados' entry? NxFilter needs to know what it is. You can define it in 'DNS > Redirection' as a quick solution.

Even if you install NxFilter on pfSense, you can't enable both captive portals. They don't share the login sessions.Use pfSense DNS and put NxFilter in upstream or use NxFilter as the authentication server.