Commit e03a4ce7 authored by Ad Schellevis's avatar Ad Schellevis

(ipfw) skip enc0 device when processing captiveportal rules, found issue when...

(ipfw) skip enc0 device when processing captiveportal rules, found issue when analyzing https://github.com/opnsense/core/issues/369
parent 5f65d541
......@@ -115,6 +115,8 @@ add {{5000 + item.zoneid|int }} allow ip from any to any dst-port 80 via {{item.
{% for item in no_cp_interface_list %}
add {{6001 + loop.index }} skipto 60000 all from any to any via {{item.if}}
{% endfor %}
# skip ipsec tunnel device from captive portal rules
add 6199 skipto 60000 all from any to any via enc0
# let the responses from the captive portal web server back out
add 6200 pass tcp from any to any out
# block everything else (not mentioned before)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment