Captive portal authentication vs Firewall rules