Commit 21b11319 authored by Ad Schellevis's avatar Ad Schellevis Committed by Franco Fichtner

(ipfw) skip enc0 device when processing captiveportal rules, found issue when...

(ipfw) skip enc0 device when processing captiveportal rules, found issue when analyzing https://github.com/opnsense/core/issues/369

(cherry picked from commit e03a4ce7)
parent c6a43661
......@@ -115,6 +115,8 @@ add {{5000 + item.zoneid|int }} allow ip from any to any dst-port 80 via {{item.
{% for item in no_cp_interface_list %}
add {{6001 + loop.index }} skipto 60000 all from any to any via {{item.if}}
{% endfor %}
# skip ipsec tunnel device from captive portal rules
add 6199 skipto 60000 all from any to any via enc0
# let the responses from the captive portal web server back out
add 6200 pass tcp from any to any out
# block everything else (not mentioned before)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment