Accessing localhost within the system redirecting to pfsense login page

stephenw10

You mean the pfSense DNS forwarder is returning 192.168.1.1 for queries for 'localhost' rather than 127.0.0.1?

Steve

johnpoz

That seems quite odd, you sure your not doing a query for localhost.something?

Clients should not even query for localhost to their dns since it should be in their local host file, or in new say windows systems it is handled via the local dns client

see in the windows host file

localhost name resolution is handled within DNS itself.

127.0.0.1 localhost

::1 localhost

And even if you did a query to pfsense for just localhost - it would return 127.0.0.1

; <<>> DiG 9.10-P2 <<>> localhost @192.168.1.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19328
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;localhost. IN A

;; ANSWER SECTION:
localhost. 86400 IN A 127.0.0.1

;; Query time: 4 msec
;; SERVER: 192.168.1.253#53(192.168.1.253)
;; WHEN: Tue Aug 19 10:34:49 Central Daylight Time 2014
;; MSG SIZE rcvd: 43

stephenw10

Reading this again, do you mean that developers are trying to access local servers and are getting the pfSense webgui? That's a much more likely result and there are several ways to avoid it:
https://doc.pfsense.org/index.php/Why_can%27t_I_access_forwarded_ports_on_my_WAN_IP_from_my_LAN/OPTx_networks

Steve

johnpoz

This seems pretty clear that users are trying to access localhost on their system

"When our developers accessing to localhost in their system ,its redirecting to pfsense login page."

Which really seems impossible to me.

So OP - please clarify when someone puts http://localhost/ in their browser they get the pfsense web gui?? And pfsense is not installed on their machines as say a VM or something?

vasukolli

Thanks for reply,

I have installed pfsense as a VM in ESXI server and assigned a static ip of "192.168.2.23" .This ip is assigned by windows server 2012. When i type localhost or 127.0.0.1 in client system's browser its displaying pfsense admin login page.

johnpoz

Sorry but that just doesn't seem likely - pics please.

Please post the ipconfig /all of your client machine.. Sorry but going to 127.0.0.1 is not going to go across the network and connect to pfsense lan IP which you say is 192.168.2.23

Is your client also a vm on this esxi host?

vasukolli

client is another computer in lan and its not a VM in ESXI server.

IPCONFIG Details:
Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : greenbuds.loc
Link-local IPv6 Address . . . . . : fe80::1455:287:cb08:6e8e%11
IPv4 Address. . . . . . . . . . . : 192.168.2.114
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.1

Image1.PNG_thumb

Image2.PNG_thumb

stephenw10

Hmm, curious.
Yes, I think we're going to need more clarification here, a diagram perhaps. How is the test client connected to the VM host?
Your pfSense LAN is set to DHCP with the Win2k12 server assigning it? Is that also virtual?

Steve

vasukolli

Both pfsense and winserver are VM's in ESXI server. IP's for client computers are assigned by winserver and DHCP for pfsense lan interface is disabled. Proxy server configuration for client computer is configured through INTERNET OPTIONS in Windows 7.

johnpoz

"Proxy server configuration for client computer is configured through INTERNET OPTIONS in Windows 7"

And are you bypassing local connections for this proxy setting? If not your asking your proxy for localhost, which I take it your proxy is pfsense?

proxybypasslocal.png_thumb

vasukolli

Hello,

Finally it solved with the help of your post.

Thanks for all of your excellent support.

-Vasu