summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2011-08-30 16:32:38 +0000
committerErmal <eri@pfsense.org>2011-08-30 16:32:38 +0000
commitd2b560442d5c6b0b0aec6b36faf793d488718223 (patch)
treeac460a76955d65b5cb523b26312a0d6acf2b8357
parent8a4f3015e44007dad22a6e1821f678293cf703a4 (diff)
downloadpfsense-d2b560442d5c6b0b0aec6b36faf793d488718223.zip
pfsense-d2b560442d5c6b0b0aec6b36faf793d488718223.tar.gz
Revert "Make the webConfigurator lockout rule to catch even edp protocol so that xmlrpc bruteforce is caught as well."
This reverts commit 8a4f3015e44007dad22a6e1821f678293cf703a4.
-rw-r--r--etc/inc/filter.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 1f545d0..8d1aede 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2278,7 +2278,7 @@ EOD;
$webConfiguratorlockoutport = $config['system']['webgui']['port'];
}
if($webConfiguratorlockoutport)
- $ipfrules .= "block in log quick proto { tcp udp } from <webConfiguratorlockout> to any port {$webConfiguratorlockoutport} label \"webConfiguratorlockout\"\n";
+ $ipfrules .= "block in log quick proto tcp from <webConfiguratorlockout> to any port {$webConfiguratorlockoutport} label \"webConfiguratorlockout\"\n";
/*
* Support for allow limiting of TCP connections by establishment rate
OpenPOWER on IntegriCloud