I had a problem with rules on the CP interface.  I only wanted to allow
Ports 80 and 443 for all my users.  I did it like this

One allowing from anywhere on my CP LAN to Port 80 Anywhere
One allowing from anywhere on my CP LAN to Port 443 Anywhere
One allowing from anywhere on my CP LAN to Port 8000 on the CP Firewall
Address

I found the most important one was the port 8000 because otherwise the
user cannot get to the CP authentication page

James

-----Original Message-----
From: C. Andrew Zook [mailto:andrewzook at pdqlocks dot com] 
Sent: 27 September 2006 15:49
Cc: m0n0wall at lists dot m0n0 dot ch
Subject: [m0n0wall] Captive portal snafu!

I have a perplexing problem setting up a captive portal....

I have the CP on the LAN interface. All works well until I restrict the 
outgoing rules on the LAN interface.

The IP of the LAN interface - 192.168.10.1
I have tried to add a rule to allow all traffic to 192.168.10.1, but 
nothing - it just times out!

When I have an allow all rule things work. What am I missing?

Thanks!
Andy