On Wed, Mar 14, 2007 at 07:11:20PM +0800, Jay Jesus Amorin wrote:
> openbsd gurus,
>
> can u please give me an idea on how can i redirect all unauthenticated
> authpf users to a webpage?
>
> and after authentication it can continue surfing the net.
>
> my rules seems wont work for me.
>
> /etc/pf.conf
>
> rdr on $wifi_if proto { tcp, udp } from ! <authpf_users> to any port {
> www, https } -> $authgate port www
>
>
> pass in quick on $wifi_if proto { tcp, udp } from any to $authgate
> port www keep state
> anchor "authpf/*" in on $wifi_if
>
>
> im running pf on openbsd 4.0.
>
you're pass rule seems to be wrong. just add the "pass" option to rdr
and it will make your life easier. that's what i'm using:
rdr pass on $wlan_if proto tcp from !<authpf_users> to port { http, https, 8080
} -> 127.0.0.1
reyk