diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2007-12-10 18:48:51 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2007-12-10 18:48:51 +0000 |
| commit | b416252810d8891d193ef0a4c28ad0891ca14d6a (patch) | |
| tree | a6b0b9a37eb73663145492703e56928294e9d876 /etc/inc/captiveportal.inc | |
| parent | 9ce0c124905a6a913c7bd1b1f42b4777a6ff28a1 (diff) | |
| download | pfsense-b416252810d8891d193ef0a4c28ad0891ca14d6a.zip pfsense-b416252810d8891d193ef0a4c28ad0891ca14d6a.tar.gz | |
Allow pfsync and carp traffic on captive portal.
Diffstat (limited to 'etc/inc/captiveportal.inc')
| -rw-r--r-- | etc/inc/captiveportal.inc | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/inc/captiveportal.inc b/etc/inc/captiveportal.inc index bd01191..2bcc200 100644 --- a/etc/inc/captiveportal.inc +++ b/etc/inc/captiveportal.inc @@ -297,8 +297,9 @@ function captiveportal_rules_generate() { /* note: the captive portal daemon inserts all pass rules for authenticated clients as skipto 50000 rules to make traffic shaping work */ - $cprules = ""; - + $cprules = "add 500 set 1 allow pfsync from any to any"; + $cprules .= "add 500 set 1 allow carp from any to any"; + /* allow nat redirects to work see http://cvstrac.pfsense.com/tktview?tn=651 */ |
