Mark Opert wrote:
[snip]

> What the Apple systems need it when the system boots and makes a request for
> ad.xxx.com to respond with a failure (no answer does not work, it must be a
> failure), and once the laptop makes a portal login to get a different DNS
> server that will then respond with the proper addresses.
> 
> Has anyone have a suggestion?

We use the "Allowed IP addresses" section in the Services:Captive Portal
page to allow traffic to our DNS servers without authenticating to the
portal first.

Graham