@johnpoz Thank you! , I'll try

@cduv Tested on 2.5.2 and it still works, though I found 90% to be more aesthetically pleasing.
Thank you for this, by the way, The limited screen usage for anything but the dashboard was slowly driving me nuts.

Using percentages for widths should be the default anyway, given the wide range of display resolutions available today. It also allows for a more flexible interface, though admittedly it can cause some headaches to get it right.

Clarified. Thanks for the detailed explanation guys.
Nice evening ☺

@f-meunier seems more like a browser caching problem maybe? If you at first had accessed it via the lan IP?

There should be nothing different be it the browser accesses it via the wan IP or the lan IP.

That being said - access from the wan/internet to the gui is normally a bad idea.. Unless you can lock it down to specific source IP or network.. Say from your work IP/Network or something.

Bad idea to expose the gui to the public internet.. If you need/want to access pfsense web gui while your remote - via a vpn connection is far better method.

I do access some of works pfsense boxes via the wan, locked down to my home IP as the only source. And I have not noticed any issues using firefox. They are not yet on 2.5.2 because of lack of access to facility, and risk in updating when nobody could be on site to correct if something went wrong.. But I do have test 2.5.2 setup here, that I could access via its wan IP vs its lan IP.. If you could give some specific example of what your seeing so I could try and duplicate it. But again - there would be no difference accessing it via the wan or lan IP. If wan rules allowed the access.

@johnpoz
Yeah, that's an option of course. I was thinking of this and reread the part "from WAN public IP" twice and toke it as "from WAN interface".

Also not sure if he added a rule for allowing TCP 443 to WAN to forward it to a server behind. In this case it would be a good advice to change the web configurators port to any other.

@johnpoz its on live with squid running.

@adrianoebm said in SG1100 - Can´t login webGUI sometimes after 21.05.1 upgrade.:

CPU is always at 100% too in the web GUI

Did you follow the suggestions in your thread about that?

@steveits Thank you!

It's a known issue and fixed on 2.6.0/21.09 snapshots

Hello Steve,
Thanks, it’s working now. Seems, missed several backups in between! that’s fine to us as it resumed to normal.

@kom Thank you - I appreciate the help.

Seems to be somewhat browser related also.
The logo disappears ONLY if:

pfSense-beta theme is selected, and

Chrome browser is used, and

Only on an SG-1100

@gertjan

I manually deleted the cert by clicking on the trash can icon.

I did not know about pfSsh.php so I create a new cert in certificates and assigned that in DNS.

I think the bottom line is I had picked a, now deleted cert in the DNS drop down, which cause the DNS service not to be able to start even though DNS SSL was unchecked. It must, since the cert was specified, check if it exists and since it no longer existed it would not start.

I restored backup file, problem solved.
thanks

@gil said in User Manager bug:

The xml revealed a several users on the several identical uid's
Editing it and picking random uid seems to have solved it.
Are there any restrictions regarding the format or sequencing of uid's?

They should follow the same conventions as FreeBSD user IDs. By default users on pfSense start with a uid of 2000 and go up by one for each new user.

@kom Thanks. I didn't know that was available.

I also sent an email to the Dark Reader support linking this forum thread, so maybe they'll fix the 404 issue on their end too.

@kenny-t said in Custom webgui for user manager:

Is there a place where I can start learning how to modify existing packages for these purposes?

As it is open source .... github pfsense.

There is a solution where you don't have to look at pfSense at all.
You use a captive portal. Activate it on pfSense and you're close to done.
As the identification mechanise,, don't use the build in user manager, but Freeradius. It's a pfSense package. Read all about how to use Freeradius and have it use a SQL 'scratchpad' storage.
Now, all you have to is making a front end that stores user credentials into the SQL database.
That looks very much like any other (a couple of billion) web site on the Internet. They are nearly all based on a web server, a bunch of PHP scripts and a SQL back end.
Now, all you have to do is learning how (Free)Radius works .... that's a though one, but still far more easier as learning what pfSense is/does from a programming point of view.

@edit : busted by @JeGr ;)

Many many thanks for this tutorial!

perhaps an option would be to enable one of the nic/ports as console port. Not sure if this will be feasible and or practically possible. [as some devices do not have vga/console rj45 port], by default.

@nexo thanks

@samemac

Test your configuration ;)
Save (export) it - and keep it on a safe place.
Instead of re installing, which is, as you said, a last resort, you could use Diagnostics > Factory Defaults
After pfSense rebooted, you should :

chose a new passwords give pfSense a host name.

And do nothing more.

You'll be online - and packages show up just fine now.

I can already tell you right now, that as soon as 'import' your saved config, you'll be back at square one.

Apply your config back into the system, manually.
One by one.
Test after every step.
As soon as breaks, you found your issue.

Several tips :

This one :

6541715a-dd93-44dc-b028-ef1c453f36de-image.png

Do you have a reason to inform the entire world what your DNS requests are ?
The perfect setting is : do not add/change/whatever any DNS settings. It's not needed.

18944378-c10b-4b3a-933f-64d67884f94e-image.png

Try Hybrid mode first.

The last firewall rule on your WAN rule is very scary.
You might as well remove pfSense from your network.

Just had the same symptons yet again, but with a slightly different error.

Jul 6 17:22:30 nginx 2021/07/06 17:22:30 [crit] 12149#100205: *772 SSL_write() failed (13: Permission denied) while processing HTTP/2 connection, client: IP, server: 0.0.0.0:443

This happened while I was logged into the gui, hadn't made any changes yet, but was just looking around.

As always, the connection to the gui dies, then my computer can no longer get to the internet. After reboot, (probably rebooting the web gui) resolves the issue.

At this point I believe this is a bug in the pfsense web software.

Hello everyone,

we have performed further tests, among other things we tested version 2.5.0, which shows the same problem.

I would be glad about any input or ideas you may provide me with!

Regards,
Timo

@jgdgzpqatddjpa said in 502 Bad Gateway when selecting Suricata IDS / Interface LAN - Categories / LAN Rules:

@bmeeks

In process...

Darn thing gave me the 3 endless flashing blue lights

Hard rebooted it. Yes not a good idea, but its back up

and.... The patch fixed the issue.

Thank you!!!

Yeah, my experience with the SG-3100 is that it takes a LONG time to boot, and every now and then, you need to hard cycle the power (after waiting a very long time).

Thanks,

I was able to resolve by reinstalling pfsense and restoring the config.

@gertjan Not in my case. Only one interface exists. WAN. And it's virtio.

I will see how 2.5.2 goes. Any day now. :)

Thanks for the more detailed explanation. Now I see what the problem is.

pfBlocker and Snort both beat the crap out of the configuration system writing to it on such a frequent basis that ACB becomes pretty much useless. I discussed ways to address this with the package maintainers some time ago but so far the problem still exists.

For this reason there is a filter in the ACB system that rejects backups if the "Reason" parameter contains "pfblocker", "snort" or "minicron".

pfSense is supposed to display an error message stating that the backup was rejected, but this seems to be broken. I'll try to get that fixed ASAP.

For now, please ensure you backup "Reason" does not include those terms.