diff --git a/etc/inc/captiveportal.inc b/etc/inc/captiveportal.inc
index 386a4ce77e..f9eb2d2bc3 100644
--- a/etc/inc/captiveportal.inc
+++ b/etc/inc/captiveportal.inc
@@ -527,7 +527,9 @@ EOD;
 	$rulenum++;
 	/* Allowed ips */
 	$cprules .= "add {$rulenum} pipe tablearg ip from table(3) to any in\n";
+	$cprules .= "add {$rulenum} pipe tablearg ip from any to table(3) in\n";
 	$rulenum++;
+	$cprules .= "add {$rulenum} pipe tablearg ip from table(4) to any out\n";
 	$cprules .= "add {$rulenum} pipe tablearg ip from any to table(4) out\n";
 	$rulenum++;