Web GUI Access from Internet
-
Bad idea…
Are you opposed to SSH or VPN?
If you are hell bent on having a very insecure set up, I wouldn't allow 443 on the wan.
Rather, I would port forward TCP port 443 from the wan to the pfsense lan IP (default is 192.168.1.1)
-
Kej,
Thanks for replying.
I just want to see it working.
After that I will remove it.
Can you help?
Cheers
-
Change destination to "Wan Address" from the list.
-
I've done this with VMs numerous times out of necessity for a few minutes to make some changes before blocking it.
Make a NAT rule under firewall > NAT
When the rule pops up, leave most of it alone.go to destination range and type in 443 in both blanks
redirect target ip - enter the pfsense lan IP (192.168.1.1 is default)
redirect target port - 443
Thats about it…
You should delete your existing rule that you posted earlier.
After you try this rule you just made you should probably delete it pretty fast also (-;
-
Kej
I followed your instructionns.
Are you now saying I should be able to access my Web GUI from any internet connection?
Cheers
-
Kej
I tried your suggestion, but I wasn't able to access my web gui with address https://192.168.1.1/
-
Yeah - I'm in Manila and I just added that (very inadvisable) rule to a personal box of mine in the states and it worked perfectly…
Then I promptly deleted the rule... -
I tried your suggestion, but I wasn't able to access my web gui with address https://192.168.1.1/
I'm not sure how you think you're going to route to a non-routable private address from the Internet…
-
hehe - OK
That IP is the one you forward too…
What you type into your browser is https://your pfsense public IP
-
;)
OK, inserted in my browser https://pfsense public ip address and I got web page is not available.
The following is my configuration
-
Is your lan interface IP 192.168.1.1?
-
Hi Kej
Yes it is.
-
And are you outside the lan on some other computer or are you trying to access this on a computer connected to pfsense?
-
Kej
I'm outside the lan on some other computer
-
Then it should work unless you have some block rules somewhere, the wrong public ip or have some other settings messed up elsewhere.
Once its working, don't forget to change your username / pass to admin/admin and post your public IP here.
-
I just had a really bad sneaking suspicion that I just have to ask…
What is the WAN of the pfsense hooked up to?
If pfsense is plugged into a MODEM (not a router) and the ISP isn't blocking 443 this should already be working.
If this is plugged into a ROUTER or a COMBO modem router and your pfsense is showing some private IP (like 192.168.x.x) on the WAN interface in the gui, this isn't going to be so simple.
-
Kej
I'm not actually on some other computer… I'm on my own computer that has internet access. However, my pfSense has been deployed on ESXi host.
pfSense has a public ip address as well as a LAN address.
I can connect via LAN but can't connect via WAN. I know the pfSense WAN interface is configured corrected with a public ip address because I can ping 8.8.8.8 and any other public ip address from pfSense interface.
Cheers
-
Does "my own computer" have a different public IP than pfsense wan?
You can always PM me your public IP and I can try it from here….
-
'My own computer', has an ip address assigned to by Virgin Media of 192.168.0.1.
So basically, what I'm trying to do is access my pfsense firewall from any computer that has an internet connection
-
If you PM me your public IP that pfsense is on, I will see if I get a GUI interface from here.
(NOTE - I don't actually think this is a good idea, but for the sake of testing, I'd do it)
