summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2010-11-30 18:59:43 -0500
committerScott Ullrich <sullrich@pfsense.org>2010-11-30 18:59:55 -0500
commitd44798f7a8a0fe54d4e676805c80e8ff82d5e41a (patch)
tree1469d85bc92dbcb98d9a4a09c071e3a4541eb094 /etc
parent7a9ed3010ae99d2422427f191f662516c2525d52 (diff)
downloadpfsense-d44798f7a8a0fe54d4e676805c80e8ff82d5e41a.zip
pfsense-d44798f7a8a0fe54d4e676805c80e8ff82d5e41a.tar.gz
Adding webConfiguratorlockout table and code.
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/filter.inc12
1 files changed, 12 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 0601cf2..27bbbd4 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -515,6 +515,7 @@ function filter_generate_aliases() {
$aliases .= "\n#SSH Lockout Table\n";
$aliases .= "table <sshlockout> persist\n";
+ $aliases .= "table <webConfiguratorlockout> persist\n";
$aliases .= "#Snort2C table\n";
$aliases .= "table <snort2c>\n";
@@ -2046,6 +2047,17 @@ EOD;
$ipfrules .= "block in log quick proto tcp from <sshlockout> to any port {$sshport} label \"sshlockout\"\n";
}
+ $ipfrules .= "\n# webConfigurator lockout\n";
+ if(!isset($config['webgui']['port'])) {
+ if($config['webgui']['protocol'] == "http")
+ $webConfiguratorlockoutport = "80";
+ elseif($config['webgui']['protocol'] == "https")
+ $webConfiguratorlockoutport = "443";
+ } else {
+ $webConfiguratorlockoutport = $config['webgui']['port'];
+ }
+ $ipfrules .= "block in log quick proto tcp from <webConfiguratorlockout> to any port {$webConfiguratorlockoutport} label \"webConfiguratorlockout\"\n";
+
/*
* Support for allow limiting of TCP connections by establishment rate
* Useful for protecting against sudden outburts, etc.
OpenPOWER on IntegriCloud