webGUI

• M

  board panel : long, looooong time to load...
  • megs  

  4
  0
  Votes
  4
  Posts
  179
  Views

  

  Bas DNS still has impacts these days ^^
• P

  Web GUI SSL error ERR_SSL_VERSION_OR_CIPHER_MISMATCH
  • philled  

  8
  0
  Votes
  8
  Posts
  704
  Views

  R

  Mea Culpa. Laptops loaded with BITDEFENDER 2019 are using encrypted web scan protection even when an exception is loaded for PFSENSE firewall which is triggering the error. Turning off encrypted web scan under online web protection allows the correct self-signed security error under the browsers which may be overridden. Thanks for all. Off I go to Bitdefender to ask them to truly honor added exceptions. Sigh.
• 

  Can not access: System Advanced
  • icabrera  

  3
  0
  Votes
  3
  Posts
  257
  Views

  

  @kom thanks a lot for your help, I did the hard refresh and rebooted the system and the problem has gone.
• 

  disabling NAT redirect entry clears description in associated rule
  • adamw  

  1
  0
  Votes
  1
  Posts
  105
  Views

  No one has replied

• 

  2.4.4: Secure Shell Public Key Settings Not Generating Key
  • beremonavabi  

  6
  0
  Votes
  6
  Posts
  253
  Views

  

  I'm pretty sure this is fixed with 2.4.4_1. The error messages have gone away and when I reset the options the system paused for quite some time. I'm assuming it was generating the keys. I didn't get any message about key generation, though.
• R

  Slow GUI
  • rmessina  

  6
  0
  Votes
  6
  Posts
  1161
  Views

  R

  Hello Guys, I did had the same problem before, notice the pfsense was routing the tracfic to the wrong gateway check your configurations under System-->Routing make sure the pfsense is pointing to the correct gateway let me know if that help Thanks.
• 

  Can't Access pfSense Interface When Using 10GbE NIC
  • ARAMP1  

  7
  0
  Votes
  7
  Posts
  355
  Views

  

  @aramp1 Good work! Bravo
• X

  SSL_ERROR_NO_CYPHER_OVERLAP when trying to connect to webgui
  • xenicle  

  43
  1
  Votes
  43
  Posts
  4107
  Views

  J

  @crbon said in SSL_ERROR_NO_CYPHER_OVERLAP when trying to connect to webgui: When the access the same IP 192.168.1.1 from my PC (running Bitdefender AV) I get the SSL_ERROR_NO_CYPHER_OVERLAP error message instead, and there is no way to bypass it. So that means the AV (Bitdefender in this case) is messing with the connection/certificate as a defense mechanism? (I have ntopng installed as per @jgravert 's reference to the other thread) Defiantly Bitdefender Scan SSL (Encrypted web scan) is active. You may need to flushdns, cache, then restart your browser after turning off Scan SSL in Bitdefender. I had to in order to get mine working again. Alternatively if you get new CA and Certificates then install them on your PC it shouldn't matter if Scan SSL is active. If that doesn't work you may need to completely remove Bitdefender from the PC then reinstall it.
• P

  Fatal Error Selecting DNS Forwarder
  • pfnewb2016  

  5
  0
  Votes
  5
  Posts
  481
  Views

  P

  I restored a backup and then was careful to not enable DNS Forwarder while DNS Resolver was already enabled.
• D

  WAN interface only to be manged
  • Dafoxx  

  16
  0
  Votes
  16
  Posts
  406
  Views

  D

  Ah, I've changed that over thanks, and yeah ill suggest to the customer to use openVPN, then we dont need the other IP for his server.
• F

  Traffic graph issue
  • Fishrman  

  6
  0
  Votes
  6
  Posts
  326
  Views

  F

  @nelsonjhone thank you for trying to help me. I found out what was going on. I figured out that this may be caused by wrong time on my server. For a few versions of PFsense it was showing wrong time. It was always one hour behind, although a correct timezone was selected. I checked BIOS time, I replaced the CMOS battery... I started digging on the Internet and found a guy with similar problem. His solution was setting services -> NTP to both interfaces LAN and WAN. This finally fixed my time and.... traffic graphs. THNX for helping
• J

  Cant edit users
  • joelt  

  4
  0
  Votes
  4
  Posts
  243
  Views

  

  Humm. Was about to edit my post but @johnpoz was to fast. Again, I took a user "001", etc etc see my image above. So, I checked the manual (/usr/local/www/systemuser_manager.php and /etc/inc/auth.inc where the function local_user_set() lives) and put this function in debug mode (adding $debug=1; at the start of the function). Logging should became more verbose. Then, I did the thing one shouldn't do, I edited (deleted the line) the user "001001:*:2057:65534:002:/home/001:/sbin/nologin in /etc/passwd. (and removed /home/001001/ also). From there on : I had more vebose logs ***, no more problems. I could edit - and edit again - re-edit, delete, create, edit. I removed the debug line. Still, all ok, the error vanished. Curious. I have this feeling that I touched the /etc/passwd file (system == FreeBSD maintained) and after that all was ok again. I can't explain .... ** more verbose logs in the ....... captive portal log - not the system log ... edit : I rebooted. Could edit a user just fine. Strange - but solved
• 

  Kill OVPN client connection
  • Gil  

  43
  0
  Votes
  43
  Posts
  5807
  Views

  M

  Has anyone tried to reproduce the bug?
• J

  SSL certificate signed
  • JohnnyBeGood  

  35
  0
  Votes
  35
  Posts
  23245
  Views

  M

  hi; ok i had to do this for https filtering in pfsense i generated the key in pfsense and downloaded it then sudo to ca certs folder made new folder renamed key to .crt file and a etc /cert area then did sudo update-ca-certificates (ubuntu 18.04 based distro) to import and it worked with the message no perm key found or the like, because before doing this you can go nowhere in the net with out that key /crt in or the perm . so I killed https filter and went back to stock squid but still maybe having av scanner issue on fresh install pf 2.4.4 . A lot has changes for me with squid and the setup so still getting pass the new stuff. swore I read https filtering has to be on now as fixed clamav scanning issue I may be wrong but it is a good thing
• D

  Web GUI not accessible on external networks via bridge interface
  • DerShorty  

  2
  0
  Votes
  2
  Posts
  205
  Views

  D

  ~ Solved yesterday. Due to tiredness some FW and NAT Rules were not configured correct.
• B

  Bug? - Traffic Graph Widget
  • bclothier  

  1
  0
  Votes
  1
  Posts
  175
  Views

  No one has replied

• S

  "WebCfg - System: User Password Manager" privilege does not allow users to access the UI
  • skullnobrains  

  5
  0
  Votes
  5
  Posts
  365
  Views

  S

  thanks to you. i'm reasonably proficient with BSD, but pfsense definitely saves some time even with such glitches. thumbs up for the nice work.
• C

  Can't access to Webgui.please help!
  • Cobik  

  10
  0
  Votes
  10
  Posts
  436
  Views

  

  Then you'll probably have to reinstall. You might have added a space in there incorrectly and wiped out the entire drive. You might connect with ssh or scp and see if /conf/config.xml is still there. If so, grab a copy, or at least try https://www.netgate.com/docs/pfsense/backup/automatically-restore-during-install.html#recover-config-xml
• M

  Strange behavior on changing SSH settings
  • maoe-tsuru  

  6
  0
  Votes
  6
  Posts
  397
  Views

  M

  Thank you for the info. I just applied the patches using the System Patches package and the configurator seems to work fine.
• M

  Solved - No access to WebGUI after setting interface addresses
  • MEgearhead  

  15
  0
  Votes
  15
  Posts
  1318
  Views

  M

  So It's now all working after a reboot. I don't know exactly what change made the difference. What I did was disconnect the downstream router, reset factory defaults, set up the interfaces using autodetect, and then configured the interfaces through WebGUI. After configuring the interfaces, I copied the two default rules from LAN to OPT1. I made an error first then corrected it. At this point LAN worked fine but I had no internet on OPT1. Just so the family would have internet, I reconnected the downstream router since I ran out of time to work on it. When I came back to it later, I rebooted pfsense and everything now works. I thought I had tried that the night before, but I may not have after correcting errors in the copied firewall rules from LAN. (When I copied the rules I changed the interface from LAN to OPT1, but I forgot to also change the destination from LANnet to OPT1net.) Thanks so much for all your help! Here are the settings in case it helps someone else: (Anything related to IPv6 or DHCPv6 is likely irrelevant for me as I don't think my connection supports it) Interfaces/WAN: IPv4 - DHCP IPv6 - DHCP6 Interfaces/LAN: General Configuration: IPv4 Type - Static IPv4 IPv6 Type - Track Interface Static IPv4 Configuration: IPv4 Address - 192.168.1.1/24 IPv4 Upstream Gateway - None IPv6 Configuration: IPv6 Interface - WAN IPv6 Prefix - 0 Interfaces/OPT1 General Configuration: IPv4 Type - Static IPv4 IPv6 Type - None Static IPv4 Configuration: IPv4 Address - 192.168.3.1/24 IPv4 Upstream Gateway - None Services/DHCP Server/LAN: Enable - checked Range - 192.168.1.100 to 192.168.1.199 Services/DHCP Server/OPT1: Enable - checked Range - 192.168.3.100 to 192.168.3.199 Services/DHCPv6 Server&RA/LAN/DHCPv6 Server Enable - checked Range - ::1000 to ::2000 Prefix Delegation Size - 48 Firewall/Rules/OPT1: Edit Firewall Rule: (for first rule) Action - Pass Interface - OPT1 Address Family - IPv6 Protocol - Any Source - OPT1net Destination - any Edit Firewall Rule: (for second rule) Action - Pass Interface - OPT1 Address Family - IPv4 Protocol - Any Source - OPT1net Destination - any Settings for Verizon G1100 router: My Network/Network Connections/Broadband Connection/Settings Internet Protocol - Use the Following IP Address IP Address - 192.168.1.200 Subnet Mask - 255.255.255.0 Default Gateway - 192.168.1.1 My Network/Network Connections/Network/Settings Internet Protocol - Use the Following IP Address IP Address - 192.168.2.1 Subnet Mask - 255.255.255.0 IP Address Distribution - DHCP Server Start IP Address - 192.168.2.2 End IP Address - 192.168.2.199
• S

  webgui loops back to login after successful authentication
  • sojot  

  2
  0
  Votes
  2
  Posts
  220
  Views

  S

  Hi, Please ignore this post. it seems 3rd time lucky on installing this. Unfortunately nothing intelligent to say on how this was resolved. i must have either made a mistake in one of the setting during the first 2 installs in Virtual Box (cant imagine what though). or something is messed up on my system or installation off VirtualBox but its resolved. apologies to anyone having spend time reading :-)
• 

  Overly long string in System Information tab
  • rmaeder  

  4
  1
  Votes
  4
  Posts
  266
  Views

  

  @grimson said in Overly long string in System Information tab: @occamsrazor said in Overly long string in System Information tab: You can disable the Version information completely in the widget settings, or disable only the update check in the update settings. Some RTFM is in order here. Thanks, am aware you can disable the version information pane entirely, and also the update check. I don't think I or the OP want to lose that functionality. We are just talking about the length of the "Version information updated......" string. My comment "Or I'd personally be happy to have the option not to show that info at all" referred only to that string itself - not the pane as a whole or the update check functionality.
• P

  WebGUI returns ERR_EMPTY_RESPONSE after update
  • Pollux  

  6
  0
  Votes
  6
  Posts
  255
  Views

  P

  Thanks, I do have a backup from right before the attempted update. Was just curious if there was some way to do it via SSH as well.
• L

  Lost access to webGui after changing from HTTPS to HTTP
  • LotfiDZ  

  6
  0
  Votes
  6
  Posts
  303
  Views

  V

  I think there’s an option in the advanced settings regarding an HTTPS feature called HSTS (HTTP Strict Transport Security) that will tell the browser to always use HTTPS when going to that host. I believe HSTS is enabled by default when HTTPS is enabled. You may need to find where in your browser you can go to clear the HSTS setting for your pfSense hostname and/or IP address in order to access it without HTTPS. Or as suggested, you can always use a different browser.
• A

  RADIUS auth in WebUI/OpenVPN does not work
  • ApolloDS  

  2
  0
  Votes
  2
  Posts
  191
  Views

  

  FreeRADIUS should be passing Class as a string by default unless the OS you installed it on does something it shouldn't in its distribution. FreeRADIUS on pfSense returns Class as a string and we do not alter any of the dictionaries or config to force it to be that way. Fix your FreeRADIUS instance and it will work fine.
• A

  2.3 Gateway monitor not working
  • authenticx  

  8
  0
  Votes
  8
  Posts
  4650
  Views

  

  @grv97 if you are unable to access pfsense webgui, you have bigger issue then whatever your using as monitor not answering the zero payload monitoring ping. BTW this thread is 2 years old, cmb is no longer with us and have not seen him around for long time - he is very active at his new home unifi forums. You are more likely to get some help if you start your own thread with exact details of your problem.
• W

  WebGUI slow
  • webdb  

  4
  0
  Votes
  4
  Posts
  309
  Views

  W

  Fresh install, all good now. Thanks fr your advise Best Daniel
• 

  Translation
  • fireodo  

  7
  0
  Votes
  7
  Posts
  354
  Views

  

  @ivor said in Translation: Thank you! You're welcome!
• U

  Webconfigurator - Access restrictions apply?
  http https webconfigurator • • udippel  

  5
  0
  Votes
  5
  Posts
  327
  Views

  U

  Okey-dokey. Though here it reads: "Wenn nicht aktiviert, wird Port 80 automatisch auf den HTTPS Port weitergeleitet. Aktivieren, um die automatische Weiterleitung zu deaktivieren." which sounds to me, the native German speaker, the other way round. Thanks to all who answered, I think I understand the behaviour. And yet, I can't really see the point of this behaviour, to me at least it is unexpected. Not? Thanks again, Uwe
• I

  Logfiles empty after update to 2.4.3-RELEASE (amd64)
  • interessierter  

  7
  0
  Votes
  7
  Posts
  500
  Views

  I

  now he is logging thank you very much
• F

  XG-7100 appliance HTTP_REFERER issue when changing LAN IP in webGUI
  • fleish  

  10
  0
  Votes
  10
  Posts
  936
  Views

  

  I was finally able to reproduce this, turns out that for whatever reason the interfaces.php page wouldn't give me the error but if I went away to something else like DHCP settings then it failed. I opened https://redmine.pfsense.org/issues/8822 for this and just pushed a fix that corrected it for me.
• A

  Webinterface error
  • admins  

  3
  0
  Votes
  3
  Posts
  292
  Views

  

  What version are you running? If it was referencing PHP 7 then it must be a snapshot, or else maybe you somehow pointed 2.4.3 at the development repo and managed to mangle the packages. Best thing to do from your position is reinstall.
• A

  change pfsense logo
  • aminbaik  

  2
  0
  Votes
  2
  Posts
  1022
  Views

  

  Hi, Correct - there is no straight forward possibility to do so, probably because way back they discovered that changing the logo didn't change anything related to firewall operations and behavior. On the other hand, for the last decade now every web browser has an "inspector" option that shows you the entire path of every image on a web site. And guess what, the pfSense GUI isn't any different. Knowing that, ans some PHP/CSS/html knowledge, and your imagination is the your only limit. Normally, you are advised to fork-of the project, and rebuild the thing own your own. Of course, totally not supported. Btw : the question the been asked a lot, and already answered as many times.
• A

  Custom Dark-Blue Theme / Skin (screenshots and video)
  • Anxy  

  14
  0
  Votes
  14
  Posts
  7800
  Views

  

  This thread is from 2 years go - he is not coming back. Thread locked
• 

  LDAP Admin has no privileges
  • Herman  

  2
  0
  Votes
  2
  Posts
  198
  Views

  C

  You need to have a group name that matches the group assigned in LDAP manually added to your pfSense router. So if your user is a member of "Router Admins" you need to create that same group locally on pfSense and assign it global admin privileges, since pfSense can't read those specific permissions from the LDAP schema. Are you using OpenLDAP, or Active Directory?
• J

  WebUI Unresponsive
  • jconnors  

  5
  0
  Votes
  5
  Posts
  372
  Views

  

  That is a very large amount of rules. It is entirely possible something in the switch to 2.4.4 helped -- the PHP differences are major, especially moving to PHP 7.2 may be related. You could undoubtedly drastically reduce the number of NAT rules with aliases though. I'm having trouble imagining any scenario that could possibly justify even a fraction of that amount.
• 

  Nav Scroll With Page Option Not Working Consistently
  • ghostshell  

  1
  0
  Votes
  1
  Posts
  209
  Views

  No one has replied

• H

  Dynamic log view does not update
  • hoegge  

  1
  0
  Votes
  1
  Posts
  184
  Views

  No one has replied

• C

  Access Webgui from WAN location
  • comet424  

  4
  0
  Votes
  4
  Posts
  342
  Views

  

  A VPN would be best, but you can do something like this as a backup: Setup Dynamic DNS on both so you have a hostname that tracks whatever your current WAN IP address is Setup an alias called RemoteManagement or something along those lines, and put in the dynamic DNS hostname from the other end. The firewall will periodically check and update the alias. Setup a remote access firewall rule using this RemoteManagement alias as the source.
• 

  Can I change the homepage (Dashboard) for any other configuration page?
  • skilledinept  

  1
  0
  Votes
  1
  Posts
  186
  Views

  No one has replied