diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2010-11-30 18:59:43 -0500 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2010-11-30 18:59:55 -0500 |
| commit | d44798f7a8a0fe54d4e676805c80e8ff82d5e41a (patch) | |
| tree | 1469d85bc92dbcb98d9a4a09c071e3a4541eb094 /etc/inc | |
| parent | 7a9ed3010ae99d2422427f191f662516c2525d52 (diff) | |
| download | pfsense-d44798f7a8a0fe54d4e676805c80e8ff82d5e41a.zip pfsense-d44798f7a8a0fe54d4e676805c80e8ff82d5e41a.tar.gz | |
Adding webConfiguratorlockout table and code.
Diffstat (limited to 'etc/inc')
| -rw-r--r-- | etc/inc/filter.inc | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 0601cf2..27bbbd4 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -515,6 +515,7 @@ function filter_generate_aliases() { $aliases .= "\n#SSH Lockout Table\n"; $aliases .= "table <sshlockout> persist\n"; + $aliases .= "table <webConfiguratorlockout> persist\n"; $aliases .= "#Snort2C table\n"; $aliases .= "table <snort2c>\n"; @@ -2046,6 +2047,17 @@ EOD; $ipfrules .= "block in log quick proto tcp from <sshlockout> to any port {$sshport} label \"sshlockout\"\n"; } + $ipfrules .= "\n# webConfigurator lockout\n"; + if(!isset($config['webgui']['port'])) { + if($config['webgui']['protocol'] == "http") + $webConfiguratorlockoutport = "80"; + elseif($config['webgui']['protocol'] == "https") + $webConfiguratorlockoutport = "443"; + } else { + $webConfiguratorlockoutport = $config['webgui']['port']; + } + $ipfrules .= "block in log quick proto tcp from <webConfiguratorlockout> to any port {$webConfiguratorlockoutport} label \"webConfiguratorlockout\"\n"; + /* * Support for allow limiting of TCP connections by establishment rate * Useful for protecting against sudden outburts, etc. |
