Possible bug: blocking bogon network allows pfSense admin access via WAN

forestgump · Nov 6, 2007, 11:31 PM

Version 1.0.1

If you turn on the "block bogon network" option from the WAN interface configuration, it allows access to the WebGUI and SSH (if turned on) from the WAN. Even if there's no other rule for the WAN or if you create a specific block rule for the WAN address, it allows access.

Is this a known bug? ???

(reboot required to test the change in bogon option)

cmb · Nov 7, 2007, 1:33 AM

I'm reasonably certain it doesn't. Loads of things have been fixed since 1.0.1, but there haven't been any issues with traffic being permitted that wasn't explicitly allowed in your rules.

1.0.1 isn't recommended, you should use 1.2RC3 from here:
http://snapshots.pfsense.org/FreeBSD6/RELENG_1_2/

and then if you're still seeing that, post back.

forestgump · Nov 7, 2007, 5:18 PM

Nevermind…it appears to have been a routing issue. Thanks.