Squid transparent fail with captive portal

[sanchezluys]

:) hi…

in the topic in spanish

http://forum.pfsense.org/index.php/topic,29877.0.html

with: pfsense 1.2.3-RELEASE
built on Sun Dec 6 23:21:36 EST 2009
and: squid 2.7.9_4

we found a error in the security, if the user put the proxy:port in your webbrowser then the captive portal fail, and the user can go to internet and bypass the captive portal password.

can help us?

[jimp]

Block traffic to the squid port from hosts on that subnet.

You may need to disable the anti-lockout rule for that to have any effect.