Captive portal which firewall rule?

Hello,

using m0n0wall 1.33b2 with three network interfaces.
WAN (PPPoE)
LAN (static IP Adress)
Hotspot (Captive portal).

Problem is now, the captive portal only works if I create a firewall rule on the hotspot interface which allow traffic from and to *all* destinations.

Dont work if I create a rule with:
"source * destination hotspot subnet *"
AND
"source * destination wan subnet *"

Whats the right firewall rule to allow all traffic ONLY to the WAN interface from the hotspot/captive portal (after authentication)?

Samuel

----------------------------------------------------------------
Postfach fast voll? Jetzt kostenlos E-Mail Adresse @t-online.de sichern und endlich Platz für tausende Mails haben.
http://www.t-online.de/email-kostenlos