On Wed, Mar 14, 2007 at 07:11:20PM +0800, Jay Jesus Amorin wrote:
> openbsd gurus,
> 
> can u please give me an idea on how can i redirect all unauthenticated
> authpf users to a webpage?
> 
> and after authentication it can continue surfing the net.
> 
> my rules seems wont work for me.
> 
> /etc/pf.conf
> 
> rdr on $wifi_if proto { tcp, udp } from ! <authpf_users> to any port {
> www, https } -> $authgate port www
> 
> 
> pass in quick on $wifi_if proto { tcp, udp } from any to $authgate
> port www keep state
> anchor "authpf/*" in on $wifi_if
> 
> 
> im running pf on openbsd 4.0.
> 

you're pass rule seems to be wrong. just add the "pass" option to rdr
and it will make your life easier.  that's what i'm using:

rdr pass on $wlan_if proto tcp from !<authpf_users> to port { http, https, 8080 
} -> 127.0.0.1

reyk

Reply via email to