NAT Reflection and HSTS Documentation

[NOYB]

HSTS is important aspect of NAT reflection.  As often as this subject comes up it would be beneficial to include information about HSTS redirection in this document section.

"Why can't I access forwarded ports on my WAN IP from my LAN/OPTx networks"
https://doc.pfsense.org/index.php/Why_can%27t_I_access_forwarded_ports_on_my_WAN_IP_from_my_LAN/OPTx_networks

Perhaps include something like this:

---

If NAT reflection is redirecting the browser to the https pfSense WebGUI instead of the http web site, the likely cause for this is HSTS redirection.

The pfSense WebGUI issues a one year Strict-Transport-Security header when it is accessed via https.  This instructs the browser to force the use of https for all subsequent requests to the specified domain.  In this case, the pfSense WebGUI.

To stop the HSTS redirection of http requests to the https pfSense WebGUI, clear the browser cookies.

---