webGUI

• P

  Use of WebGUI Requires Two Attempts in Order to Invoke Action.
  • pslinn  

  1
  0
  Votes
  1
  Posts
  14
  Views

  No one has replied

• B

  Gui Logon Issue
  • Bridger  

  1
  0
  Votes
  1
  Posts
  24
  Views

  No one has replied

• Z

  best practices for remotely administering a pfSense machine after remote install?
  • zippydan  

  3
  0
  Votes
  3
  Posts
  80
  Views

  Z

  Thanks. I ended up taking your advice and setting up another light linux VM to use as simply a browser client.
• K

  SEC_ERROR_INADEQUATE_KEY_USAGE when accessing the webGUI from Firefox
  • kevindd992002  

  23
  0
  Votes
  23
  Posts
  14818
  Views

  M

  @Gertjan said in SEC_ERROR_INADEQUATE_KEY_USAGE when accessing the webGUI from Firefox: Hi, Click on and you see what cert is used by pfSense, what SAN, if the dates are ok, etc. The Time is set good .. no problem with it This : @jimp said in SEC_ERROR_INADEQUATE_KEY_USAGE when accessing the webGUI from Firefox: You can make a fresh GUI cert from the console with current best defaults with pfSsh.php playback generateguicert This the point .. How i can generate a new cert and from where Please can you help me will generate a new cert. Firefox won't trust it at first, but you can overreirde this. because you know that "https://192.168.1" or "https://my-pfsense.my-network.tld" IS your pfSese and not some hacked site. You can also use the console access to reset GUI access, so that http://192.168.1.1 is useable, so you can inspect with the GUI what the issue is. I did this when i could not access since first time .. and it works with http
• M

  Weird error in syslog - open() "/usr/local/www/robots.txt" failed (2: No such file or directory)
  • Madsurfer  

  3
  0
  Votes
  3
  Posts
  24
  Views

  M

  @jimp Ok clear. I will monitor what is specifically happens from that IP and dig a little deeper. Thanks for the swift reply.
• K

  how to access webgui over wan port?
  • KhaledSN  

  3
  0
  Votes
  3
  Posts
  30
  Views

  

  @KhaledSN Have you tried these methods? https://docs.netgate.com/pfsense/en/latest/book/config/what-to-do-when-locked-out-of-the-webgui.html#add-a-rule-with-easyrule and check that nginx is running and listen on 443: # sockstat | grep 443
• N

  CSRF Check Failed on Login with no internet
  • Niquest  

  10
  1
  Votes
  10
  Posts
  4256
  Views

  B

  I just seen this error today. Internet is all connected. Maybe a clock issue. Dunno. CSRF check failed Missing or expired CSRF token Form session may have expired, cookies may not be enabled, or possible CSRF-based attack. Resubmitting this request may put the firewall at risk or lead to unintended behavior.
• 

  Traffic appearing on two VLAN graphs
  • lohphat  

  2
  0
  Votes
  2
  Posts
  30
  Views

  No one has replied

• B

  Upgrade to 2.4.5 and WebGUI is blank.
  • basm  

  7
  0
  Votes
  7
  Posts
  77
  Views

  B

  @Gertjan Yeah, I restored config via console a couple of times and it didn't help. Something about the GUI got clobbered in the initial update. A reinstall did the trick.
• S

  Status: Monitoring is completely broken, pfSense 2.4.5
  monitoring • • scurrier  

  14
  0
  Votes
  14
  Posts
  181
  Views

  

  @scurrier : check System > Routing > Gateways IS WAN really WAN (an old interface name ?) and now called WAN_DHCP ? (example) ? What are the gateway names ? Is monitoring activated for them ? edit : ls -al /var/db/rrd old, abandoned rrd files (== abandoned interface names) might exist.
• T

  Unable to acccess Web GUI of fresh installed Pfsense on Virtual Box
  • techsovereignty  

  2
  0
  Votes
  2
  Posts
  64
  Views

  T

  If you want to access the LAN side of pfSense that's running in the vm from within windows. You'll have to create a bridge interface in your host OS then set your pfSense's LAN interface to be bridged to that bridge interface. for example windows | bridge interface | virtualbox | pfsense LAN interface (using the bridge interface in the host OS) | pfsense WAN interface (using the NAT interface in virtualbox) | Internet
• C

  RRD Graphs are gone missing??
  • Cool_Corona  

  3
  0
  Votes
  3
  Posts
  20
  Views

  C

  Thanks :)
• T

  Fireall Aliases not working as expected
  • TechTeamjim  

  4
  0
  Votes
  4
  Posts
  20
  Views

  T

  Curious, I looked at one of our routers. Out of 22 IP aliases, mix of host and network, 15 show in diagnostics/tables. When creating a rule though, if you pick "single host or alias" then you can type in the Source Address field to the right and it should dynamically show you matching aliases. Even ones not on the diagnostics page show there for me. They don't show in a dropdown.
• P

  change language not work in 2.4.5
  • peterchan9  

  1
  0
  Votes
  1
  Posts
  38
  Views

  No one has replied

• R

  400 Bad request | The plain HTTP request was sent to HTTPS port | nginx
  nginx webgui • • richardrfb  

  3
  0
  Votes
  3
  Posts
  35
  Views

  R

  @Gertjan, obrigado! Fiz a restauração através do console, opção 15, agora consigo acessar as configurações através do Webconfig. Teve um detalhe, eu tive que efetuar o restar do webconfigurator, depois disso foi possivel logar no Webgui. Mais uma vez, obrigado!
• T

  webConfigurator is blocking port 80
  • TheNetStriker  

  1
  0
  Votes
  1
  Posts
  19
  Views

  No one has replied

• S

  Upgrade to 2.4.5 and admin user has limited rights
  • Stewart  

  2
  0
  Votes
  2
  Posts
  24
  Views

  S

  Found it. config.xml remove the member with the ID of 0 (since that is the ID of the admin user). After a reboot it's working.
• K

  No logs to display
  • karis_pk  

  3
  0
  Votes
  3
  Posts
  148
  Views

  K

  @Gertjan Thank you, it is working perfectly now after setting it up as you have suggested. Thanks again
• C

  WebGUI Lag
  • cyrus104  

  14
  0
  Votes
  14
  Posts
  116
  Views

  C

  Not zombies!!!! Well I did restore this config from awhile ago but I didn't even think I had it active on the last build. Regardless, I went ahead and removed it unless I come up with a reason to use it and then I reinstall it and hopefully that will fix anything broken by an initial misconfiguration. So far it's loading in about 5-8 seconds. I'll continue to check on it while troubleshooting other issues. Thanks.
• C

  Strange webGUI
  • cofee  

  8
  0
  Votes
  8
  Posts
  119
  Views

  C

  @jimp I tried what you suggested, but unfortunately nothing changed. Webgui is not available from other subnets.
• T

  webGUI over HTTPS not working after restoring backup
  • tgoltz  

  6
  0
  Votes
  6
  Posts
  74
  Views

  

  Euhhh, OPenVPN will never ever bind to port 443 TCP. As you already found out, nginx, the GUI web interface binds to 0.0.0.0:443 aka all the available networks. Starting OpenVPN fill produce a fail, or the GUI fails on all pfSense installs that use OpenVPN, and lately, that's a lot. So .... check your OpenVPN config ;) Btw : it's possible to use 443 TCP for OpenVPN. In that case, move the GUI web server out of the way first. @tgoltz said in webGUI over HTTPS not working after restoring backup: Is there a way to tell webconfigurator to only try to bind to the address of my LAN interfaces? Short answer : no. Long answer : of course. Check the nginx web configuator config file. Locate where and how "bind to 0.0.0.0:443" is written. Now, look up where the config file is build (probably /etc/inc/services.inc) and change the part where the "listen ..." is laid out - and hardcode your LAN interface there. Beyond that : make a drop list in the GUI, store the selection in the config file, and use that one to select your interface. Consider even making a pull request and your code will live forever. edit : The coding of the Anti-lockout on System > Advanced >Admin Access will probably need some attention. The word LAN over there would be the interface where nginx is listening.
• 

  Dashboard autologout annoyance in 2.4.5
  • rmaeder  

  3
  0
  Votes
  3
  Posts
  62
  Views

  

  I changed the "Session timeout" in the System/UserManager menu to 43200 (about one month), and so far there haven't been any more forced logouts. Perhaps there is a problem with setting this value to "0"? Let's wait and see.
• P

  User rights - Edit NAT - No interfaces in list to choose from
  • Parallelverschiebung  

  3
  0
  Votes
  3
  Posts
  24
  Views

  P

  Thank you! You're right, firewall access is not ideal in this case. But it's necessary for us to let people manage their port forwarding rules, so this is a preliminary solution we can live with. I hope they change this behaviour in a future release.
• B

  [Solved] Lots webgui, page doesn't load
  • bfred  

  8
  0
  Votes
  8
  Posts
  78
  Views

  

  @bfred said in [Solved] Lots webgui, page doesn't load: it didn't break just after saving it (or applying it?) What you saw was the proof of having a stateful firewall. Initial connections going trough the firewall rules are matched with the firewall rules, top to bottom. If one rule matches as a "pass", a firewall state is created, and subsequent traffic bypasses the firewall, because it's known as accepted. This accelerates a lot traffic throughput. As long as you do not edit the initial matching rule, the state keeps up. Even when you add or edit a rule above your initial rule that would block such a connection. To really apply new rules that do not "seem to work right away" you have to manually reset the states, or, same thing : reset the firewall as does a reboot. See Diagnostics > States > States and Reset States. @bfred said in [Solved] Lots webgui, page doesn't load: https port from 1 machine to a different port on that same machine A device on the Internet ?
• J

  cannot this error when accessing web interface over the internet getting "outdated or unsafe TLS security"
  • jojothehumanmonkey  

  4
  0
  Votes
  4
  Posts
  77
  Views

  J

  thanks much for the advice, i figured out how to setup the openvpn. the wizard was pretty good. took me a while to figure out the the wizard does not create a user in the local user database. i have an account with packtpub.com. they have several books on pfsense. i like my sg1100,
• J

  IPSEC Mobile GUI Improvement
  • jumpers  

  4
  0
  Votes
  4
  Posts
  33
  Views

  J

  Thanks jimp: done as suggested: Feature #10340 (https://redmine.pfsense.org/issues/10340)
• P

  Cannot access webui: web ui is not supported in VSX mode
  • potter  

  3
  0
  Votes
  3
  Posts
  72
  Views

  P

  You are correct. I looked at the the system.log and it is complaining about another 192.168.1.1 with a different mac. I workaround the problem by using 10.x.x.x instead for LAN
• V

  I can't access user maintenance on a other user than the admin, only the option to change the password appears, even when in the admins group.
  • valdomiro werner  

  2
  0
  Votes
  2
  Posts
  18
  Views

  

  double post, the answer is here https://forum.netgate.com/topic/151051/i-can-t-access-user-maintenance-on-a-user-other-than-the-admin-only-the-option-to-change-the-password-appears-even-when-in-the-admins-group/2
• A

  Possible Bug: ue0 Interface Not Accepted during boot
  • andrewCIT  

  3
  0
  Votes
  3
  Posts
  1591
  Views

  E

  I have the same issue.
• N

  Cert Manager
  • NogBadTheBad  

  7
  0
  Votes
  7
  Posts
  147
  Views

  

  @pfSenseTest said in Cert Manager: Already updated. https://redmine.pfsense.org/issues/9825 Yep, we already saw that last week and enacted the lower lifetime. New installs will have the GUI cert set to that lifetime, or you can make a new one when pfSsh.php playback generateguicert if you're on a release or snapshot with the change. Just the GUI cert lifetime change is in 2.4.5, but for 2.5.0 there are more benefits. For example, the GUI has a visible warning when you exceed the limit for a server cert: Plus in 2.5.0 where you can renew a cert in the GUI, there is an option to apply the lower limit at that time.
• R

  WebGUI locks up
  • rb_it_pf  

  7
  0
  Votes
  7
  Posts
  97
  Views

  R

  I disabled the Dashboard auto-update check. The host that I am using to access the webGUI uses the pfSense as the DNS resolver. Upstream from that the pfSense is on a domain with a DNS role.
• T

  Automating Certificate imports with letencrypt script
  • tylerhoadey  

  20
  0
  Votes
  20
  Posts
  10511
  Views

  

  See https://forum.netgate.com/topic/150603/certs-not-written-to-conf-config-xml-if-write-certificates-selected-in-general-settings/2 Ask yourself this question : if you re install pfSense 'from scratch' and you import your settings using the config.xml file, thinks like certs and CA"s are also imported. And yes, when the package Acme received a cert from LE after a successful request, it load (replace an older cert with the same "ID") it into the System > Certificate Manager > Certificates list.
• 

  I'm lost access via http
  • humaxoid  

  2
  0
  Votes
  2
  Posts
  61
  Views

  

  It's probably HSTS cached by your browser giving you trouble and not anything in pfSense itself. You shouldn't be using HTTP anyhow. Keep the GUI on HTTPS.
• B

  GUI accessible, can't block webgui access on all interfaces, unless WAN
  • Bognad  

  8
  0
  Votes
  8
  Posts
  69
  Views

  

  Or you can just find the specific state or states in the table and kill it/those. But sure a full flush works too ;)
• B

  How capture webGUI traffic?
  • Bognad  

  13
  0
  Votes
  13
  Posts
  62
  Views

  

  Well then you would see the traffic via tcpdump then... You sure your using the correct interface em0? Capture all traffic - are you seeing traffic at all on that interface... If your not seeing traffic to whatever port its on.. Then your coming in a different interface, you have the wrong interface selected, or the wrong port. Why would you change ports? Because your block rule wasn't working and you think changing the port would magically start working? If you allow traffic, and state is created and then create a block rule - you have to flush the old state.
• S

  Status -> Monitoring for DHCP only shows first pool
  • skron  

  2
  0
  Votes
  2
  Posts
  49
  Views

  

  It doesn't look like the code that gathers the stats for RRD is aware of pools, only the main range. If there isn't already an entry on https://redmine.pfsense.org for that, open a new feature request there.
• I

  WebConfigurator default certificate expired yesterday
  • ipfftw  

  24
  0
  Votes
  24
  Posts
  5516
  Views

  J

  @Derelict I know this is old... I just wanted to thank you for the steps. Got me back up and running quick when a certificate was accidentally revoked. Thank you!
• E

  Web GUI slow - WAN Failover
  • edz  

  1
  0
  Votes
  1
  Posts
  44
  Views

  No one has replied

• H

  After changing pfsense from HTTP to HTTPS i must type https://xxxxxx.xx to reach web page
  • ha11oga11o  

  2
  0
  Votes
  2
  Posts
  82
  Views

  H

  Its answered here https://forum.netgate.com/topic/149857/web-gui-auto-redirect-http-connection-to-https I cant close thread, can moderator do it, please. Thanks.
• 

  Web GUI Auto Redirect HTTP Connection to HTTPS
  • SgtKilgore406  

  6
  0
  Votes
  6
  Posts
  133
  Views

  H

  And this just answered my question here: https://forum.netgate.com/topic/150042/after-changing-pfsense-from-http-to-https-i-must-type-https-xxxxxx-xx-to-reach-web-page Im using custom port, so yeah. Thanks for clarification.