move ssh lockout outside of the foreach user rule loop so we only have one instance of the rule

This commit is contained in:
Bill Marquette 2005-03-04 16:51:49 +00:00
parent 355229d0f3
commit 36fcb5d482

View File

@ -1571,11 +1571,13 @@ EOD;
$ipfrules .= $line;
}
$ipfrules .= "block in log quick proto tcp from <sshlockout> to any port 22 label \"sshlockout\"\n\n";
$i++;
}
$ipfrules .= "\n# SSH lockout\n"
$ipfrules .= "block in log quick proto tcp from <sshlockout> to any port 22 label \"sshlockout\"\n\n";
$ipfrules .= "\n# VPN Rules\n";
$lan_ip = $config['interfaces']['lan']['ipaddr'];
$lan_subnet = $config['interfaces']['lan']['subnet'];