@nirmelamoud said in netgate UI stop working, page does not return:

ethernet ports lights on for 10..30 sec than off for 10..30 sec

That sounds more like it's rebooting...? You can try opening a ticket at go.netgate.com.

@gertjan said in netgate UI stop working, page does not return:

Netgate device was sold with this cable

All the models we've bought recently do. I vaguely recall it being an option in the past? I may be misremembering that though. I always leave it in its plastic bag and write on the bag so no one throws it in the cable drawer and it is lost in the neverending sea of cables. :)

I am using a virtual pfSense box, so this is not an option. And yes - using client certificates is far more secure than using a username and password combination. That way, I also don't have to physically wired to the pfSense box, even if it wasn't virtual.

I'll look at submitting a feature request. Thanks!

@bmeeks Sorry. I am an idiot :( I expected graphs to be in bits, but they were in bytes. Actually they works just fine

@jimp said in "WebCfg - System: User Password Manager" and "User - Config: Deny Config Write":

What you h

No problem. Thanks.

Thanks @jimp - I thought that was the case. I’ve been testing OpenXPKI which has role definitions. A user can request a cert and download a CA, for instance, but only an admin can actually a cert and download keys. I was hoping I might be able to accomplish the same thing with pfSense and it’s ACLs. Oh well, I’ll stick with trying to get OpenXPKI to work.

(I still think pfSense’s cert manager could it be it’s own product - it’s so much better than anything else I’ve seen so far!)

Definitely not the only one. The language is poor. "Heading Labels" or "Option Heading Labels" would be a much clearer way to describe this option than "Left Column Labels."

Why?

(1) "Left Column Labels" implies there are "Right Column Labels" and maybe "Center Column Labels." One of multiple kinds of labels, in any case, for sure. Which in fact there are not. There is one kind of label, which happens to be typeset flush left. All the qualification "Left Column" does is mislead, creating the false idea of other kinds of labels from which these are distinguished. The reader wondering what labels are referred to will be looking for an object having a "left column" instance as well as other instances.

(2) Four options up on the "General Setup" screen is the option "Dashboard Columns" to select the number of visual layout columns for the dashboard web page. "Column" here is the commonly-known typesetting and visual layout term, used for both print and visual layout on web pages, in advertising, and so on. A two-column design, a one-column ad, columns gutters margins, etc. A reader who is carefully looking down the setup page will have this idea of what a column is when they get to "Left Column Labels" below. This time, however, "column" is a technical term referring to an HTML implementation of a visual Label or Heading. It's not a visual column, it's a programming strategy to implement a visual flush-left heading label (flush-left within a single layout "column"). Even readers very familiar with columns as a low-level typesetting implementation (e.g., HTML, LaTeX) can miss the fact that the meaning of "column" has changed.

@JeGr thanks for this intervention i didn't get everything about the technology you mentionned but i will try to find informations about it.
@Gertjan thanks again for your support through this topic it helped me a lot.

right

Maybe the feature request would be something like ability to add any favicons your browsers or applications look for easy.. I personally would be more for a easy way to not have nginx log stupid shit like that ;)

I think you can do something like this

In the nginx conf where it does not log specific things if not found.. So you could list or let users edit this list so that noise like that is not logged..

To follow up on my post, I eventually realized that the Lockwise on my phone was auto-submitting the form when credentials were picked (unlike the Firefox web browser). However with a slight delay on the page load I didn't notice that and submitted the form myself (again). That explains all my symptoms.

I tested my IPv6 access :

I introduced a firewall rule on my HENET interface :

32f30acb-b7d8-476a-bfd3-d69a3821dc1a-image.png

I have a DNS record that point's to my WAN IPv4, not my WAN IPv6, so I had to use my IPv6 WAN IP to connect to the GUI.
I had a cert warning from my browser, of course.

But the access worked well :

63a2eab4-54c2-4efa-9ef7-04825ab0f777-image.png

"Well" means for me : knowing that my IPv6 is using a tunnel to tunnel.ne.net (Huricane IPv6 ISP) the speed was somewhat limited, about 10 Mbytes /sec.
I could browse the entire pfSense GUI very well, no hick-ups ....

edit : I'll leave the IPv6 access open for a while.
PM me, and I can even send you an 'access' so you can test drive yourself.
That is, if you promise not to change something, as this is a "live' environment ;)

Hi,

The acme package uses this command (shell script) to reload the NGINX web servers after a new cert was imported.

The acme package also contains the scripts that can show you how to import the certs into pfSense config.