On 22.09.2004 09:06 +0200, Vincent Fleuranceau wrote:

> # make sure the user cannot lock himself out of the webGUI
> pass in quick from $lansa/$lansn to $lanip keep state group 100
> 
> This line comes *before* any user defined rule.
> 
> Please download the source and read the entire /etc/inc.filter.inc
> file!
> 
> This is not a bug but a design choice. I think Manuel does not want
> to have 50 people every week asking for assistance because they
> have locked themselves out of m0n0wall.

Exactly! And I'm 200% sure that would happen if it wasn't for that
rule. Still, the next beta release will probably have an option that
allows you to specify one IP address of a "management host" to only
accept webGUI traffic from that IP address. That will have to do.

- Manuel