The webui is no longer responding
-
Hi,
I have a pfsense 2.0.1 box that is in an HA pair of firewalls. The master firewall's web interface has stopped responding. My browser connects to tcp port 443 and then sits forever waiting for a response. I have restarted the webUI from the console a few times and the behavior is still the same.
Has anyone seen this or know something I can try to fix it?
Thanks,
Dan
-
Since you are in a HA, have you tried rebooting the box? Did you connection to the slave node to see if it had failed over? Did you turn off the anti-lock out rules?
-
1. Haven't tried rebooting yet, since it would kill of active OpenVPN sessions and cause havoc for users.
2. The slave node is still a slave all of the routing works pefectly. I can get into it via ssh and the load average is < 1.
3. The anti lockout rules are disabled, but it's not a problem with firewall rules. There is a 3 way TCP handshake on port 443.
At this point I will just wait until after hours and reboot the thing.
-
more than likely, someone did something like start a never ending ping from Diag>Command, which will lock all the PHP processes. Do a "killall php" at the console and it'll probably work again.
-
Is that enough to bring down the firewall??
-
It will only stall the WebGUI long enough for most browser timeouts to occur.
The firewall was still doing it filtering job and you can login via ssh and console. If in a HA pair the secondary machine will take over so that you can reboot or do other tasks without down time for most traffic (VPN will be affected). Killing PHP and restarting the Web Configurator like cmb suggests is a way to try to get it going without restart. -
Is that enough to bring down the firewall??
No, it will make the web interface non-responsive, but has no impact on everything else.