block pfsense GUI access via ip allow only domain name
-
I want to disable GUI acccess to my pfsense using ip address such as 66.11.245.1 instead I want to allow only domain name for example test.com can someone help me with that ?Any solutions for it ?thank you
-
@rick_alone
For security reasons you should better consider to setup a VPN server and totally disable access to the GUI from WAN. -
@rick_alone huh? you mean you want to allow a fqdn that changes? An fqdn resolves to an IP.. How would you deny access if they use an IP vs the fqdn that resolves to the IP.. You would actually connect via the IP..
Not sure on what exactly your trying to accomplish.
If your test.com resolves to 66.11.245.1 that is the IP you would be connecting too.
-
I want to disable that login with ip or redirect to https when someone type my pfsense ip
-
@rick_alone You really can not prevent access via IP.. But redirection to https would be set here.
Do you have this set to disabled? Do you have your gui set to https? See top of screenshot.
I am not aware of setting like a host hearder rule where the httpd doesn't present the page unless the host header matches something like you can do in say haproxy..
You might be able to put the web gui behind the haproxy? Your not opening up your gui to the public internet are you.. That is bad juju even if you could/did limit access to knowing the fqdn..
-
Would HTTPS in a key-only SSH tunnel work? ( I can put acronyms together!)
I use a VPN myself.
-
@provels yeah the best way to access pfsense gui while remote would be via a vpn. But it openvpn, ipsec, wireguard, tailscale - or sure a ssh tunnel via say public key auth would be what ya call it a poor mans vpn ;)
