summaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2005-11-07 06:44:52 +0000
committerScott Ullrich <sullrich@pfsense.org>2005-11-07 06:44:52 +0000
commit657f3f1592e1aa1aa0e7bd49fcfcbb4d9079f8e6 (patch)
tree872dd9d880602e8f17fd66c2045adc72eb808145 /etc/inc
parentbf97d72a5cb2b536f17ed2ac04f198a44df51d62 (diff)
downloadpfsense-657f3f1592e1aa1aa0e7bd49fcfcbb4d9079f8e6.zip
pfsense-657f3f1592e1aa1aa0e7bd49fcfcbb4d9079f8e6.tar.gz
remove allow
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/captiveportal.inc4
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/captiveportal.inc b/etc/inc/captiveportal.inc
index 54ccc2b..e89a331 100644
--- a/etc/inc/captiveportal.inc
+++ b/etc/inc/captiveportal.inc
@@ -296,14 +296,14 @@ function captiveportal_rules_generate() {
if($config['captiveportal']['interface'] == $ifname)
continue;
$int = convert_friendly_interface_to_real_interface_name($ifname);
- $cprules .= "add 30 skipto 50000 allow all from any to any in via {$int} keep-state\n";
+ $cprules .= "add 30 set 1 skipto 50000 all from any to any in via {$int} keep-state\n";
}
/* captive portal on LAN interface? */
if ($cpifn == "lan") {
/* add anti-lockout rules */
$cprules .= <<<EOD
-add 500 set 1 pass all from $cpip to any out via $cpif
+add 500 pass all from $cpip to any out via $cpif
add 501 set 1 pass all from any to $cpip in via $cpif
EOD;
OpenPOWER on IntegriCloud