How to disable http referrer check using ssh

pola090

i would like to know the command to disable http referrer checks

AhnHEL

Are you speaking of the checkbox in the GUI under System/Advanced/Admin Access?

pola090

Yes unfortunately i dont have gui access i only have ssh

dhatz

I can think of two ways:

Edit the config.xml file by hand (from ssh using vi) to add the nohttpreferercheck (note: small typo here, if any dev is watching, it should be nohttpreferrercheck) option in section
Connect to pfsense with ssh, then instruct your browser to tunnel web traffic using socks over SSH (exact configuration depends on the ssh client)

jimp

If you're on 2.0.2 or 2.1:

pfSsh.php playback disablereferercheck

If you're on 2.0 or 2.0.1, you can go into the PHP shell and execute the equivalent set of commands as the script does:

global $config;

$config = parse_config(true);

$config['system']['webgui']['nohttpreferercheck'] = true;

echo "Disabling HTTP referer check...";

write_config("PHP shell disabled HTTP referer check");

echo "done.\n";

dhatz

@jimp:

pfSsh.php playback disablereferercheck

I know I'm nitpicking but should it be spelled with two "r"s ?

referrercheck

jimp

No, no it should not.

http://en.wikipedia.org/wiki/HTTP_referer

dhatz

LOL, indeed you're right. Live and learn :)

jimp

Well if it were any other use of the word, you'd be right… but the misspelling made it into the spec and we're stuck with it now. :-)