diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2005-11-07 06:44:52 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2005-11-07 06:44:52 +0000 |
| commit | 657f3f1592e1aa1aa0e7bd49fcfcbb4d9079f8e6 (patch) | |
| tree | 872dd9d880602e8f17fd66c2045adc72eb808145 | |
| parent | bf97d72a5cb2b536f17ed2ac04f198a44df51d62 (diff) | |
| download | pfsense-657f3f1592e1aa1aa0e7bd49fcfcbb4d9079f8e6.zip pfsense-657f3f1592e1aa1aa0e7bd49fcfcbb4d9079f8e6.tar.gz | |
remove allow
| -rw-r--r-- | etc/inc/captiveportal.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/captiveportal.inc b/etc/inc/captiveportal.inc index 54ccc2b..e89a331 100644 --- a/etc/inc/captiveportal.inc +++ b/etc/inc/captiveportal.inc @@ -296,14 +296,14 @@ function captiveportal_rules_generate() { if($config['captiveportal']['interface'] == $ifname) continue; $int = convert_friendly_interface_to_real_interface_name($ifname); - $cprules .= "add 30 skipto 50000 allow all from any to any in via {$int} keep-state\n"; + $cprules .= "add 30 set 1 skipto 50000 all from any to any in via {$int} keep-state\n"; } /* captive portal on LAN interface? */ if ($cpifn == "lan") { /* add anti-lockout rules */ $cprules .= <<<EOD -add 500 set 1 pass all from $cpip to any out via $cpif +add 500 pass all from $cpip to any out via $cpif add 501 set 1 pass all from any to $cpip in via $cpif EOD; |
