Ciao,
with the new version of iptables (1.4.10) a rule of captive portal print an error
“The “nat” table is not intended for filtering, the use of DROP is therefore inhibited.”
Insiede /root/kerbynet.cgi/scripts/cp_start
if ! [ -f /var/register/system/cp/NOLIMIT ] ; then
HASHLIMIT=” -mhashlimit –hashlimit-name CP_Redirect –hashlimit-mode srcip,dstport –hashlimit 10/minute –hashlimit-burst 15″
iptables -t nat -A CapPortHTTP -p tcp –syn $HASHLIMIT -j $CAPTUREHTTP
iptables -t nat -A CapPortHTTPS -p tcp –syn $HASHLIMIT -j $CAPTUREHTTPS
iptables -t nat -A CapPortHTTP -p tcp –syn -j DROP
iptables -t nat -A CapPortHTTPS -p tcp –syn -j DROP
fi
