mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix captive portal multinterface rule gfeneration.

Browse Source
This commit is contained in:
Ermal Lui 2009-05-30 18:23:18 +00:00
parent 0e11e13894
commit d02a500dff
1 changed files with 19 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
etc/inc/filter.inc
View File

@ -1533,11 +1533,25 @@ function filter_rules_generate()
* is allowed on a locked down interface
*/
if (isset($config['captiveportal']['enable'])) {
$cp_interface = $config['captiveportal']['interface'];
$cp_interface_real = $FilterIflist[$cp_interface]['if'];
$cp_interface_ip = $FilterIflist[$cp_interface_real]['ip'];
if(is_ipaddr($cp_interface_ip) and $cp_interface_real)
$ipfrules .= "pass in quick on {$cp_interface_real} proto tcp from any to {$cp_interface_ip} port { 8000 8001 } keep state\n";
$cpinterfaces = explode(",", $config['captiveportal']['interface']);
$cpiflist = array();
$cpiplist = array();
foreach ($cpinterfaces as $cpifgrp) {
if (!isset($FilterIflist[$cpifgrp]))
continue;
$tmpif = get_real_interface($cpifgrp);
if (!empty($tmpif)) {
$cpiflist[] = "{$tmpif}";
$cpipm = get_interface_ip($cpifgrp);
if (is_ipaddr($cpipm))
$cpiplist[] = $cpipm;
}
}
if (count($cpiplist) > 0 && count($cpiflist) > 0) {
$cpinterface = implode(" ", $cpiflist);
$cpaddresses = implode(" ", $cpiplist);
$ipfrules .= "pass in quick on {$cpinterface} proto tcp from any to {$cpaddresses} port { 8000 8001 } keep state\n";
}
}
/* relayd */
$ipfrules .= "anchor \"relayd/*\"\n";