On Feb 1, 2008 2:49 PM, Neil A. Hillard <m0n0 at dana dot org dot uk> wrote:
>
> One thing that would resolve this and is a nice-to-have would be the
> ability to disable the implied rules - so for example, on the PPTP
> server page there would be a tick box for 'add implied rule', by default
> checked.  Unchecking it would then allow the admin to add their own
> rule.
>
> I'd like this so I could have the PPTP server available to my wireless
> LAN but not over the Internet (OK, I could block it at my router but it
> would be nice to keep everything centrally controlled).
>
> It would work much like the 'Disable webGUI anti-lockout rule' option.
>

Agreed.  What I would like to see is an option on the Advanced page to
disable automatic rules generation for all VPN (PPTP and IPsec).

-Chris