So you are using the captive portal in bridge mode. It is correct that you assign the 2 IP addresses to the bridge. That is a necessary condition to make iptables capturing rule to work. But I never tested the captive portal in bridge mode in the situation where there are two IP subnets on the same bridge. Let me do some tests.