summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2011-08-30 16:33:30 +0000
committerErmal <eri@pfsense.org>2011-08-30 16:33:30 +0000
commit716fc5a0cc3ba1e51d47663efb281fc724e1185f (patch)
tree16046638310dc2c84d4e080a23dbd35f8215ab32
parentcde671805cccb380e60acb35374a23d3a7f48a99 (diff)
downloadpfsense-716fc5a0cc3ba1e51d47663efb281fc724e1185f.zip
pfsense-716fc5a0cc3ba1e51d47663efb281fc724e1185f.tar.gz
Revert "Make the webConfigurator lockout rule to catch even edp protocol so that xmlrpc bruteforce is caught as well."
This reverts commit cde671805cccb380e60acb35374a23d3a7f48a99.
-rw-r--r--etc/inc/filter.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 3e1a40b..18e5067 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2129,7 +2129,7 @@ EOD;
$webConfiguratorlockoutport = $config['system']['webgui']['port'];
}
if($webConfiguratorlockoutport)
- $ipfrules .= "block in log quick proto { tcp udp } from <webConfiguratorlockout> to any port {$webConfiguratorlockoutport} label \"webConfiguratorlockout\"\n";
+ $ipfrules .= "block in log quick proto tcp from <webConfiguratorlockout> to any port {$webConfiguratorlockoutport} label \"webConfiguratorlockout\"\n";
/*
* Support for allow limiting of TCP connections by establishment rate
OpenPOWER on IntegriCloud