On 10/28/05, Tarun Kundhi <tkundhi at inebraska dot com> wrote:
> Thanks that makes sense. Any suggestions or guidance on preventing webGUI
> access? I see it in the Advanced setting (I know they are unsupported) but I
> can't seem to get filter rules in place that allow traffic to pass through
> the interface but prevent the webGUI from displaying.
>

Testing my memory here, but I believe this is how it works.  The
default should be that only the LAN subnet has acess to the webGUI
that can't be restricted (other than via the "disable anti-lockout
rule").

On OPT interfaces (I'm assuming you have an OPT interface doing CP),
you just need to deny HTTP or HTTPS traffic to the destination the
LAN's IP.


>  If I can figure this out I'd be glad to attempt some
> documentation for basic captive portal setup.
>

That'd be much appreciated!  You can coordinate with me off list if
you end up doing this, and I'll get it into the documentation.

-Chris