webGUI

• B

  Update SSL Certificate from command line
  • berbec  

  19
  0
  Votes
  19
  Posts
  4094
  Views

  B

  @Callan05 I updated the script a little bit, now it's no longer necessary to look up the old certificate and key, the script does that itself :) One thing needs to be checked, the name of the certificate to replace in pfSense, in this script the name contains "WebConfCA". If it's called different, that needs to be replaced. #!/bin/bash host="ipaddress" username="username" password="password" certificate="certificate.pem" privatekey="privatekey.pem" mv $certificate $certificate.combo csplit -f $certificate.part $certificate.combo '/-----BEGIN CERTIFICATE-----/' '{*}' for file in $certificate.part*; do echo "Processing $file file.."; output=$(openssl x509 -noout -subject -in $file); if [[ $output = *CN*=*.* ]] then mv $file certificate.pem fi if [[ $output = *Authority* ]] then mv $file CA_LetsEncrypt.pem fi done cert=$(base64 $certificate) cert=$(echo $cert | sed "s/ //g") key=$(base64 $privatekey) key=$(echo $key | sed "s/ //g") sshpass -p $password scp $username@$host:/conf/config.xml config.xml oldcertificate=$(grep -A4 -P 'WebConfCA' config.xml | awk '/<crt>/ { print $1}' | sed "s|<crt>||g" | sed "s|</crt>||g") oldprivatekey=$(grep -A4 -P 'WebConfCA' config.xml | awk '/<prv>/ { print $1}' | sed "s|<prv>||g" | sed "s|</prv>||g") if grep "$cert" config.xml > /dev/null then echo "Identical certificate found, renewal not required" else echo "Certificate not found, renewal required" sed -i -e "s|$oldcertificate|$cert|g" config.xml sed -i -e "s|$oldprivatekey|$key|g" config.xml sshpass -p $password scp config.xml $username@$host:/conf/config.xml sshpass -p $password ssh $username@$host rm /tmp/config.cache sshpass -p $password ssh $username@$host /etc/rc.restart_webgui find . -size 0 -name $certificate.part* -print0 |xargs -0 rm -- rm $certificate.combo rm certificate.pem rm privatekey.pem rm CA_LetsEncrypt.pem rm config.xml fi
• R

  Web Gui unable to access from external network
  • riener  

  2
  0
  Votes
  2
  Posts
  103
  Views

  

  https://docs.netgate.com/pfsense/en/latest/firewall/remote-firewall-administration.html
• A

  Cannot log in to Web GUI after LAN IP change
  • Aililan  

  5
  0
  Votes
  5
  Posts
  413
  Views

  

  @Aililan said in Cannot log in to Web GUI after LAN IP change: under Ethernet it says "self assigned" IP address 169.254.57.209 That means it couldn't get an address from the DHCP server, so the OS self-assigns an APIPA address.
• C

  Access WebGUI from OPT (management interfaces)
  • christianbergeron  

  10
  0
  Votes
  10
  Posts
  254
  Views

  C

  @kiokoman Yes you did! I was blinded by it I guess!
• T

  Traffic Graphs not displaying any traffic
  • tweexter  

  1
  0
  Votes
  1
  Posts
  43
  Views

  No one has replied

• A

  Show serial number in webgui?
  • almw  

  9
  0
  Votes
  9
  Posts
  733
  Views

  

  @bulletproof Try 2265. if (strlen($serial) >= 10 && strlen($serial) <= 16 && Maybe rename the box to fw_9X0RDX1? Ignore at will! ;)
• A

  Can't get webGUI from Chrome on one PC
  • AES2  

  5
  0
  Votes
  5
  Posts
  256
  Views

  A

  I only had three Chrome extensions, none important, so I removed them all. Still timed out trying to connect to pfSense. Then I started Chrome with extensions disabled. Still timed out. Then my bank started saying "Sorry, our system is currently unavailable. Please try again." after some time when I try to log in. Just like pfSense, my bank has no problem with Firefox, Edge, and IE, which lets pfSense off the hook. I've killed enough time on this. I'll give Firefox and Edge a try.
• 

  Dependency problems in using aliases in static routes and alias visibility
  • JeGr  

  1
  0
  Votes
  1
  Posts
  36
  Views

  No one has replied

• D

  Fresh install GUI hangs "One moment while initial wizard starts"
  • DrownEnt  

  4
  1
  Votes
  4
  Posts
  626
  Views

  

  Also : the wizard isn't needed. During initial setup, fill in System => general setup. At least LAN and WAN interfaces, and you're up.
• M

  Can't bring up Netgate on browser
  • markchen  

  5
  0
  Votes
  5
  Posts
  111
  Views

  M

  Thank you so much for your assistance. I found out I accidentally change the TCP port on the Netgate when I was setting up The Helm server. All is well now.
• R

  Alternate admin user partial permissions
  • rb_it_pf  

  4
  0
  Votes
  4
  Posts
  104
  Views

  R

  Hi Jim, Applying this patch fixed the issue: https://github.com/pfsense/pfsense/commit/b9ed452dbba4689e6280efa7f503e30809a3d8e4.patch Thanks.
• M

  Certificate Issue
  • maldemer  

  17
  0
  Votes
  17
  Posts
  216
  Views

  

  Looking into issues is never wasted time.. Something really odd for sure going on - have never seen such an issue before.. Which are always the fun ones! Would be better to try and figure out what exactly is wrong with the install that could be causing such an issue - there are no errors in the log at all? Was this a clean install, or an update? Was it restored from a backup xml from a different or older system, etc.? Let us know when you have your primary working again.
• C

  Saving changes very slow, auto config backup to blame
  • chrullrich  

  2
  0
  Votes
  2
  Posts
  74
  Views

  

  ACB has been having some issues over the past 2-3 days or so.
• R

  Local user in admin group does not have all admin functionality
  • RCS-Michael  

  3
  0
  Votes
  3
  Posts
  124
  Views

  R

  @KOM said in Local user in admin group does not have all admin functionality: cf529cbe33ae53f3f95b37a227da141b97465f20 Thank you, that took care of it. Michael
• S

  Web GUI colors change
  • Supermule  

  6
  0
  Votes
  6
  Posts
  2610
  Views

  L

  The file path that @chadc01e provided no longer exists on the current version, so I thought I'd update the topic for anyone interested in making this change. As of version 2.4.4 p3, the bar graphs for the System Information widget on the dashboard (memory usage, temperature, disk & swap usage, etc.) are red regardless of the value. Go to System > General Setup and in the webConfigurator section it will show your theme, our system uses pfSense. Go to Diagnostics > Edit File and in the /usr/local/www/css/ folder open your theme (pfSense.css). Use the browser search feature (Ctrl +F) for ".progress-bar" and edit this section: .progress-bar { background-color: #B71C1C; } I changed the color from #B71C1C (red) to #4CAF50 (green) that matches the Thermal Sensors, Interfaces, and other dashboard widgets. When finished, click "Save" and reload your dashboard.
• W

  Custom menu items in config.xml <menu> <url> can you specify a port?
  • webstaff  

  4
  0
  Votes
  4
  Posts
  63
  Views

  

  I'm not aware of any current feature request for that. If you want to open one, for a future release, feel free to create a feature request at https://redmine.pfsense.org
• H

  How to add more options in pppoe-server page.
  • hashbang  

  1
  0
  Votes
  1
  Posts
  121
  Views

  No one has replied

• W

  WebGUI slow when trying to add or edit NAT rules, with pfBlockerNG
  • Willever  

  1
  0
  Votes
  1
  Posts
  56
  Views

  No one has replied

• 

  Chrome autofills invisible input fields in the "Interface" tab
  • rmaeder  

  2
  0
  Votes
  2
  Posts
  54
  Views

  

  Could you fix it from the Chrome side by going into the settings menu and playing with the autofill options?
• A

  Shutdown pfSense remotely with a Linux/Bash Script
  • afasoas  

  4
  0
  Votes
  4
  Posts
  2010
  Views

  

  Just tested this, and works exactly how jimp stated.. Let's see what you did exactly.. Because what I have learned over the years is users say they did X, when it ends up they really did Y. You set in sudo for no password checkbox right? and /etc/rc.halt as the command they can run [2.4.4-RELEASE][testhalt@pf1.sitea.lan]/home/testhalt: sudo /etc/rc.halt Shutdown NOW! shutdown: [pid 51717] *** FINAL System shutdown message from testhalt@pf1.sitea.lan *** System going down IMMEDIATELY System shutdown time has arrived [2.4.4-RELEASE][testhalt@pf1.sitea.lan]/home/testhalt: I didn't bother testing it with just cmd line for the whole thing, but if can ssh with the account using public key and doesn't ask me for password to run the cmd, then could sent it all at once..
• Z

  Gateway Showing offline in web gui but internet is working!
  • zainali525  

  6
  0
  Votes
  6
  Posts
  79
  Views

  

  Good luck to you. I've seen several cases of users whose gateway monitoring wasn't working, just as yours isn't, but I don't think the actual cause was ever discovered, or if it was I certainly didn't hear about it.
• C

  Enable disabled user account from command line
  • chrisxps  

  8
  0
  Votes
  8
  Posts
  312
  Views

  C

  Thanks All, Genuinely don't know why i didn't just try the url (facepalm) haha
• D

  Web GUI Not accessible
  • Ducati0927  

  7
  0
  Votes
  7
  Posts
  163
  Views

  D

  @johnpoz actually I just saved that to download and read on the planes tomorrow. Thanks again, Will G
• C

  GUI feature requests
  gui floating • • candlerb  

  4
  0
  Votes
  4
  Posts
  106
  Views

  

  Valid use cases for sure.. And I also like your suggestion of showing what interfaces rule is bound too, etc.
• M

  Impossible to add new users to pfSense 2.4.4 Release p3
  • MDSO  

  6
  0
  Votes
  6
  Posts
  443
  Views

  

  @MDSO said in Impossible to add new users to pfSense 2.4.4 Release p3: I apologize for such an epic fail Ah shucks! Such things happen. It got me thinking because of the yellow backdrop because I know of no current function in the UI to do that. Also it was one of two password fields filled out. If you edit a user, normally their PW field is completely hidden/empty so you don't accidentally change or remove a character. So no problem, glad to help.
• D

  Multiple problems with NAT rule creation UI
  nat rules web gui • • DavidGA  

  5
  0
  Votes
  5
  Posts
  85
  Views

  

  @DavidGA said in Multiple problems with NAT rule creation UI: You apparently can't create NAT rules for destination port ranges Huh? Sure you can.. But yeah concur with JeGr if you were going to do that you would just use a 1:1 nat. I don't have a mac to test with - but for sure could test it with multiple browsers on windows or linux.. Let me fire up safari on my iphone or ipad.. edit: Just fired it up on my iphone and works just fine.. When selected network as address the box did turn gray, but just clicked on it and it went white and could enter stuff..
• D

  pfSense-issued certificates invalid
  • dodexahedron  

  1
  0
  Votes
  1
  Posts
  72
  Views

  No one has replied

• Z

  Can TLSv1.1 be disabled?
  • zonda  

  16
  0
  Votes
  16
  Posts
  857
  Views

  

  Might be nice to have a CP option to enable compatibility with older clients, but I'm still thinking it's safe enough just to keep 1.1 around for a little while like we did with 1.0.
• B

  CPU usage displaying pfSense dashboard
  • bimmerdriver  

  6
  0
  Votes
  6
  Posts
  231
  Views

  

  So, um, logout? Everything burns cycles, even having the Hyper-v console open.
• C

  Cannot add new users
  • c0mputerking  

  5
  1
  Votes
  5
  Posts
  401
  Views

  

  Apply the patch and it is fixed. -Rico
• D

  pfsense v2.4.4 - 504 gateway time-out -
  • df3l0p  

  1
  0
  Votes
  1
  Posts
  97
  Views

  No one has replied

• D

  WebGui Won't Load after OpenVPN Client Drops (2.4.4)
  • DudeGuy  

  3
  0
  Votes
  3
  Posts
  55
  Views

  D

  Thanks for the response. I will give that a try and see what happens when the VPN next drops. Not sure I see how it will help, though. Doesn't the system upgrade check only commence AFTER you've successfully logged in to the GUI?
• B

  Backup / Restore DDNS
  • bimmerdriver  

  1
  0
  Votes
  1
  Posts
  52
  Views

  No one has replied

• 

  Opera Not Accepting Certificate (solved)
  • NollipfSense  

  27
  0
  Votes
  27
  Posts
  1003
  Views

  

  What I mean by 101 shit, is trusting the ca... And what a CA even is.. To be honest anyone understands what a CA is and even saw that the cert manager allows you to create ones via a gui should be an eureka moment for anyone wanting to trust certs ;) As to using them on other devices locally, and it working before just doing an exception - yeah that is all changing.. Your no longer going to be able to do that.. I would bet any and all browsers end up going there at some point.
• O

  WebGUI on the same appliance
  • ovidius  

  3
  0
  Votes
  3
  Posts
  89
  Views

  

  To get a browser, at least one fancier than the text-based links which is built-in, you need an entire desktop environment. That's a bad idea for a firewall for a number of reasons, most of them security-related. If you want to keep things isolated but still have a GUI nearby, that's a perfect job for a Raspberry Pi or similar inexpensive small-form computer.
• 

  Temperatures Sensor Raw Output
  • crazybrain  

  3
  0
  Votes
  3
  Posts
  77
  Views

  

  Thanks @jimp, I figured that as much to be the case, however, the "Show temperature in Fahrenheit" option was not grayed out indicating as such.
• P

  2.4.4-RELEASE-p3 "User Manager" menu links wrong page
  • psp  

  3
  0
  Votes
  3
  Posts
  339
  Views

  

  There's always the testing zone workaround: :)
• C

  Services c-icap & clamd
  • Chasire  

  5
  0
  Votes
  5
  Posts
  62
  Views

  C

  Hello, huge thanks for the help! I got it fixed and it's working.
• 2

  2.4.4-RELEASE-p3 error creating PPP interface
  • 2lostkiwis  

  7
  0
  Votes
  7
  Posts
  117
  Views

  2

  @Derelict okay, must have been something corrupt in the firware. I reinstalled the firmware as per the instructions, using a USB stick and console access. Adding a PPP now has no issues. Thanks all for your help :-) https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html
• F

  Changing MTU on the gui does nothing
  • fernandodx 0  

  4
  0
  Votes
  4
  Posts
  80
  Views

  

  Because they are completely different things.. Again google mtu vs mss..