Hi,
I solved the activation link problem. It was our firewall that was causing problems. Can you confirm that the click must necessarily take place from the device that must register? I saw that if I wanted to give only a few minutes to go to your email and click on the activation link instead of the canonical 10min, I have to use the email_activation_timeout parameter of the mail source. But if I want the captive portal to appear once this time has elapsed, and then that's it? In practice, only 2 opportunities are given to register to connect to the Internet. Da: leonardo.i...@itsinformatica.it <leonardo.i...@itsinformatica.it> Inviato: martedì 10 maggio 2022 16:09 A: 'Zammit, Ludovic' <luza...@akamai.com> Oggetto: R: [PacketFence-users] error in captive portal with email authentication Ok but: * for emails arrived with the current configuration, clicking on the link gives me an error "The site cannot be reached (DNS_PROBE_FINISHED_NXDOMAIN)" * I would like to disable the default profile. How can I do? Da: Zammit, Ludovic <luza...@akamai.com <mailto:luza...@akamai.com> > Inviato: martedì 10 maggio 2022 15:43 A: leonardo.i...@itsinformatica.it <mailto:leonardo.i...@itsinformatica.it> Oggetto: Re: [PacketFence-users] error in captive portal with email authentication Hello Leonardo, That’s not possible.. How they will reach their inbox to click on the link if they don’t have internet access? Thanks, Ludovic Zammit Product Support Engineer Principal <https://www.akamai.com/us/en/multimedia/images/custom/2019/logo-no-tag-93x45.png> Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> On May 10, 2022, at 9:17 AM, leonardo.i...@itsinformatica.it <mailto:leonardo.i...@itsinformatica.it> wrote: Hi, thanks for the answers and in any case I will consider the services offered later. Returning to the subject of email authentication, our customer would like the Internet connection to not be active until the user clicks on the validation link of the email arrived. how can I do? Also for emails arrived with the current configuration, clicking on the link gives me an error "The site cannot be reached (DNS_PROBE_FINISHED_NXDOMAIN)" thank you Da: Zammit, Ludovic <luza...@akamai.com <mailto:luza...@akamai.com> > Inviato: martedì 10 maggio 2022 14:27 A: leonardo.i...@itsinformatica.it <mailto:leonardo.i...@itsinformatica.it> Cc: packetfence-users <packetfence-users@lists.sourceforge.net <mailto:packetfence-users@lists.sourceforge.net> > Oggetto: Re: [PacketFence-users] error in captive portal with email authentication Hello Leonardo, 1) That’s odd and not normal, you can check which IPSET session the Mac address is seen in with the command : ipset -L | less 2) The email registration source gives you 10 mins access on the network in order to get into your inbox and click on the link to validate your email, totally normal behavior. That setting can be found in the email source itself. 3) Normal, explained in 2). 4) After 10 mins, your node would be unregister that will force the device to see the captive portal again. Those issues can be hard to troubleshoot, if you want to sort them out faster, I suggest you to look at our offered services. Thanks, Ludovic Zammit Product Support Engineer Principal <https://www.akamai.com/us/en/multimedia/images/custom/2019/logo-no-tag-93x45.png> Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://urldefense.com/v3/__https:/twitter.com/akamai__;!!GjvTz_vk!THKxlr3zQocIqcei4tcrjQyP24OLpt8knyQLNKv_rzUs8Al3IojsOfWTtceONdfYmjlnv0hN0zDx9fj8q-5TKvMvXSsnKw$> <https://urldefense.com/v3/__http:/www.facebook.com/AkamaiTechnologies__;!!GjvTz_vk!THKxlr3zQocIqcei4tcrjQyP24OLpt8knyQLNKv_rzUs8Al3IojsOfWTtceONdfYmjlnv0hN0zDx9fj8q-5TKvNBCSIbuA$> <https://urldefense.com/v3/__http:/www.linkedin.com/company/akamai-technologies__;!!GjvTz_vk!THKxlr3zQocIqcei4tcrjQyP24OLpt8knyQLNKv_rzUs8Al3IojsOfWTtceONdfYmjlnv0hN0zDx9fj8q-5TKvM4fCiZeg$> <https://urldefense.com/v3/__http:/www.youtube.com/user/akamaitechnologies?feature=results_main__;!!GjvTz_vk!THKxlr3zQocIqcei4tcrjQyP24OLpt8knyQLNKv_rzUs8Al3IojsOfWTtceONdfYmjlnv0hN0zDx9fj8q-5TKvPm2aT17w$> On May 7, 2022, at 2:50 AM, leonardo.i...@itsinformatica.it <mailto:leonardo.i...@itsinformatica.it> wrote: hi, could you answer me please? I have decided to implement pf in production but I should study and clarify many aspects. Thanks Da: leonardo.i...@itsinformatica.it <mailto:leonardo.i...@itsinformatica.it> <leonardo.i...@itsinformatica.it <mailto:leonardo.i...@itsinformatica.it> > Inviato: lunedì 2 maggio 2022 13:09 A: 'Zammit, Ludovic' <luza...@akamai.com <mailto:luza...@akamai.com> >; 'packetfence-users' <packetfence-users@lists.sourceforge.net <mailto:packetfence-users@lists.sourceforge.net> > Oggetto: R: [PacketFence-users] error in captive portal with email authentication Hi, I have configured pf in "inline enforcement". The management interface 172.16.0.252 is connected to the firewall (172.16.0.5) and acts as wan. I added an inline interface 192.168.1.252 associated with the second network card and on which I enabled the captive portal (Additionnal listening daemons). I created a mail authentication source that I gave in the connection profile I created. I have applied this profile to the inline network 192.168.1.0. I have dedicated a wifi connection with SSID: ITS_Guest to this study scenario. Unfortunately, however, the following strange behaviors occur: 1) sometimes connecting a device for the first time to the ITS_Guest wifi, it happens that the captive portal does not appear but the device surfs the Internet regularly. When I go to the pf console on the Nodes and Users menu items I find this device associated with the "default" user with Status: Unregistered Then if I don't use it for a while, and as soon as I use the Internet on this device, the captive portal comes out with an email request. 2) for another device this happens to me: I connect to the ITS_Guest wifi and the captive portal appears. I enter the e-mail address (to which the pf e-mail also arrives), but even if I do not click on the "Activate Access" button in the e-mail received, after several seconds the device begins to regularly surf the Internet. When I go to the pf console on the Nodes and Users menu items I find this device associated with the user having the name of the email address entered in the captive portal with Status: Registered 3) Even the behavior of point 2 also occurs by entering a non-existent email address. 4) If I don't use a registered device for a few minutes, as soon as I launch the browser on it, the captive portal comes out again Thanks in advance
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users