diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2005-09-26 19:19:27 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2005-09-26 19:19:27 +0000 |
| commit | 92274aed093d7b50b5ee5055bbb94a60835384db (patch) | |
| tree | 013b8f4367e32767fda14679212540a0e9bf9f99 /etc | |
| parent | 7117945e527d1cd383f5174588c44dfaf783ba51 (diff) | |
| download | pfsense-92274aed093d7b50b5ee5055bbb94a60835384db.zip pfsense-92274aed093d7b50b5ee5055bbb94a60835384db.tar.gz | |
axe pf captive portal. not sure how this got added back.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/filter.inc | 18 |
1 files changed, 0 insertions, 18 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index fee0024..111ec37 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1451,24 +1451,6 @@ anchor "packagelate" EOD; } - /* - * captive portal, pf version - * first pass captive portal interface traffic to port 8000 - * then block every incoming packet on the interface (non quick) - * then follow up with an allow items in the captiveportal anchor to flow - */ - if(isset($config['captiveportal']['enable'])) { - $cp_interface = filter_translate_type_to_real_interface($config['captiveportal']['interface']); - $cp_ip = find_interface_ip($cp_interface); - $lan_ip = $config['interfaces']['lan']['ipaddr']; - $ipfrules .= "\n# Setup Captive portal policy rules\n"; - $ipfrules .= "table <captiveportal>\n"; - $ipfrules .= "block in on {$cp_interface} from any to any label \"block items initially for cp\"\n"; - $ipfrules .= "pass in quick on {$cp_interface} proto { tcp udp } from any to {$cp_ip} port { 8000 53 } keep state label \"pass items to cp web serv\"\n"; - $ipfrules .= "pass in quick on {$cp_interface} proto { tcp udp } from any to {$lanip} port { 8000 53 } keep state label \"pass items to cp web serv\"\n"; - $ipfrules .= "pass in on {$cp_interface} from <captiveportal> to any keep state label \"allow captive portal authd users\"\n"; - } - $ipfrules .= "\n# SSH lockout\n"; $ipfrules .= "block in log proto tcp from <sshlockout> to any port 22 label \"sshlockout\"\n\n"; |
