Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Odd log message

    Scheduled Pinned Locked Moved General pfSense Questions
    6 Posts 3 Posters 865 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      axxxxe
      last edited by

      Found this in the system log. Can anyone explain what this means?

      2022/11/05 19:42:41 [error] 50518#100120: *309 open() "/usr/local/www/.env" failed (2: No such file or directory), client: 109.237.98.226, server: , request: "GET /.env HTTP/1.1", host: "<my_IP_addr>"

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @axxxxe
        last edited by

        @axxxxe would seem you have your gui open to the internet.. I doubt that 209 address inside your network?

        When you open up a web server to the internet, all kinds of stuff will get requested, normally looking for exploitable stuff.

        Not a good idea to expose the pfsense gui to the public internet.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 1
        • A
          axxxxe
          last edited by axxxxe

          Can you tell me how to disable this? I just went through a lot of effort making sure nginx could bind to WAN port 443 per this thread:

          https://forum.netgate.com/topic/175661/sg-3100-rebooting/21

          Edit: I think maybe I found the issue. I recently deleted an OVPN server that was listening on WAN port 443. Just realized I never deleted the associated pass rule 😬

          Pass rule is now gone.

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @axxxxe
            last edited by

            @axxxxe If you wnat to use 443 for your proxy, change the web gui port to something else. I use 8443 for mine for example. I have openpn and haproxy that use 443.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 1
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Or even: https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/port-share.html

              johnpozJ 1 Reply Last reply Reply Quote 1
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @stephenw10
                last edited by

                @stephenw10 yup use that if its not openvpn it sends it to the port that haproxy is listening on.

                port-share 127.0.0.1 9443

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.