From 386d9df5f55eb4b78cbff72ff6a59650c496b479 Mon Sep 17 00:00:00 2001 From: Scott Ullrich Date: Sun, 29 May 2005 01:41:36 +0000 Subject: [PATCH] Allow DNS for captive portal to query the built in dns forwarder --- etc/inc/filter.inc | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 562602e081..d6fceaff8f 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -150,8 +150,7 @@ function filter_configure() { mwexec("/bin/mv {$g['tmp_path']}/ipfw.rules {$g['tmp_path']}/ipfw.rules_old"); } else { mwexec("/sbin/ipfw -f flush"); - if(!isset($config['captiveportal']['enable'])) - mwexec("/sbin/kldunload ipfw.ko"); + mwexec("/sbin/kldunload ipfw.ko"); } if($rules_loading <> 0) { @@ -1669,7 +1668,7 @@ EOD; $ipfrules .= "\n# Captive portal\n"; $ipfrules .= "table \n"; $ipfrules .= "block in on {$cp_interface} from any to any\n"; - $ipfrules .= "pass in on {$cp_interface} proto tcp from any to {$lanip} port = 8000 keep state\n"; + $ipfrules .= "pass in on {$cp_interface} proto { tcp udp } from any to {$lanip} port { 8000 53 } keep state\n"; $ipfrules .= "pass in on {$cp_interface} from to any keep state\n"; }