https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162010-09-01T20:19:56ZpfSense bugtrackerpfSense - Bug #869: Captive Portal rule does not work when using a restrictive rulesethttps://redmine.pfsense.org/issues/869?journal_id=31102010-09-01T20:19:56ZChris Buechlercbuechler@gmail.com
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Closed</i></li></ul><p>The rule is correct as it is, where it passes to 8000/8001 to $cpinterface, and it all functions correctly. The reason allowing only OPT1 subnet to OPT1 subnet doesn't work is if you block the original destination's SYN it will get dropped by pf. e.g. if you browse to google.com and get IP 74.125.45.105, if you aren't allowing HTTP traffic to destination 74.125.45.105, that's going to get dropped and you won't get redirected to CP. That's the correct behavior.</p>