Re: [pfSense] My son is able to bypass my captivate portal

2014-05-14 Thread Ryan Rodrigue
You can set a nat forward on dns port to force all dns request to go to a specific address. Firewall>NAT Interface > LAN (or your internal interface you wish to use) Protocol TCP/UDP Destination: Any Destination Port Range: 53 Redirect Target IP: Where you want it to go, Perhaps OpenDNS address.

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Ryan Coleman
I’ll expand this: My email client defaults to top-reply. I have not found a way to fix that. My mobile client is top-reply only. Removing the cruft - I do that when necessary but when it’s a main reply to the content, no. Footers are 4 lines long, not enough to make even the most stringent of IS

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Matthias May
Am 11.05.2014 21:48, schrieb Stefan Baur: Am 11.05.2014 21:28, schrieb Ryan Coleman: The simple solution is to block all outbound DNS at the firewall, but this can also break things (like some Google and Apple devices). Even broken devices usually have a fallback mode, but be careful of what br

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Ryan Coleman
No. > On May 11, 2014, at 14:48, Stefan Baur wrote: > > Am 11.05.2014 21:28, schrieb Ryan Coleman: > >>> The simple solution is to block all outbound DNS at the firewall, but >>> this can also break things (like some Google and Apple devices). >>> Even broken devices usually have a fallback m

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Kevin Tollison
On May 11, 2014 3:48 PM, "Stefan Baur" wrote: > > Am 11.05.2014 21:28, schrieb Ryan Coleman: > > >> The simple solution is to block all outbound DNS at the firewall, but > >> this can also break things (like some Google and Apple devices). > >> Even broken devices usually have a fallback mode, but

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Stefan Baur
Am 11.05.2014 21:28, schrieb Ryan Coleman: >> The simple solution is to block all outbound DNS at the firewall, but >> this can also break things (like some Google and Apple devices). >> Even broken devices usually have a fallback mode, but be careful of >> what breaks when you do this! > Correct

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Ryan Coleman
Correct. Using this feature will break any client with a hard-defined DNS - as we found out in testing at the bar. On May 11, 2014, at 13:48, Adam Thompson wrote: > On May 11, 2014 1:37:01 PM CDT, Mehma Sarja wrote: > My Samsung Chromebook bypasses my router/OpenDNS because it has it's own DN

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Adam Thompson
On May 11, 2014 1:37:01 PM CDT, Mehma Sarja wrote: >My Samsung Chromebook bypasses my router/OpenDNS because it has it's >own >DNS entries. > >Yudhvir > > > >> Basically it takes a DNS call the first time and goes elsewhere. then >it >> corrects itself. If he’s got a different DNS set up then eith

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Mehma Sarja
My Samsung Chromebook bypasses my router/OpenDNS because it has it's own DNS entries. Yudhvir > Basically it takes a DNS call the first time and goes elsewhere. then it > corrects itself. If he’s got a different DNS set up then either CP does not > work or, potentially, it could be bypassed. >

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Ryan Coleman
I don’t have the brain power to rewrite this right now… but this page is pretty well written: http://en.wikipedia.org/wiki/Captive_portal Basically it takes a DNS call the first time and goes elsewhere. then it corrects itself. If he’s got a different DNS set up then either CP does not work or

[pfSense] My son is able to bypass my captivate portal

2014-05-11 Thread Wajih Ahmed
He plays online games and i don't see him logged in the captivate portal. Furthermore i have some MAC address that i allow to passthough but i have checked and he doesn't seem to be duplicating them. Does the captivate portal cover all ports or specific one? Regards __