mirror of
https://github.com/pfsense/pfsense.git
synced 2025-10-26 11:38:35 +00:00
move ssh lockout outside of the foreach user rule loop so we only have one instance of the rule
This commit is contained in:
parent
355229d0f3
commit
36fcb5d482
@ -1571,11 +1571,13 @@ EOD;
|
||||
$ipfrules .= $line;
|
||||
}
|
||||
|
||||
$ipfrules .= "block in log quick proto tcp from <sshlockout> to any port 22 label \"sshlockout\"\n\n";
|
||||
|
||||
$i++;
|
||||
}
|
||||
|
||||
$ipfrules .= "\n# SSH lockout\n"
|
||||
$ipfrules .= "block in log quick proto tcp from <sshlockout> to any port 22 label \"sshlockout\"\n\n";
|
||||
|
||||
$ipfrules .= "\n# VPN Rules\n";
|
||||
$lan_ip = $config['interfaces']['lan']['ipaddr'];
|
||||
$lan_subnet = $config['interfaces']['lan']['subnet'];
|
||||
|
||||
Loading…
Reference in New Issue
Block a user