How to secure internet access to go only via captive portal rules?

Question

I have set up a pfSense Captive portal service witch blocks access for unauthorized users. Generally, without CP enabled, packets can pass away with no restriction.

The thing I want is to set the firewall in the way the traffic can pass only via CP rules. When I add a firewall rule that blocks everything at the end of the list, then authenticated users cannot use the internet, because it seems that firewall rules applies before CP rules.

The reason why I want to set strict rules is that if the CP service fails to start for some reason, without aditional firewall rule, internet access will be open for everyone, witch can be dangerous.

How can I create block rule in fw without blocking CP?

Answer 1

Sometimes working with internet sites I have problem with firewall. In this case I use special tools as like firewall checker port checker These tool helps to check the port availability and scan ports that appear open to the external world, then test whether they are filtered or not. It helps to protect private data online.