Access from LAN Interface to LAN IP over http not possible (only over https)

KOM · Dec 23, 2016, 8:29 PM

LAN to LAN traffic doesn't cross any interfaces so pfSense is not involved from a firewall perspective – the two machines talk directly to each other. You said you're running squid. Transparent or explicit? Is the browser you're using configured to use the proxy or not? Do you have your client set to bypass the proxy for local addresses? If using WPAD, does your wpad.dat file have DIRECT specified for LAN connections?

rftweds · Dec 23, 2016, 8:41 PM

thanks, interesting idea.

squid is running transparent.

Proxy in firefox is disabled. i also disabled it in system settings to test. no change.
even when i disable squid server on pfsense maschine still same problem.

i tried it with different machines windows 7 and windows server 2012 R2.

KOM · Dec 23, 2016, 8:52 PM

Is this a new install?

rftweds · Dec 23, 2016, 8:56 PM

hmm.. relatively runs for ~60 days. but i havent changed much.
i restarted it today.

KOM · Dec 23, 2016, 9:06 PM

Can I assume that it didn't always behave this way and that you're not just finding it now? If so, what changed between when it last worked and now? Any funny NATs? I can't imagine why it would redirect to HTTPS on its own.

rftweds · Dec 23, 2016, 9:18 PM

as i installed it i selected to run webconfigurator on https. now i want to change it to http (for some … reason it needs to be http)

i dont want to reinstall the pfsense box if not realy neccessary

the only changes i made was install squid + clamav and setup ipsec vpn (on install date)

so i never tried http before until today.

i relay dont know why it redirects, thats exactly the point im struggling with.

KOM · Dec 23, 2016, 9:21 PM

You have ot change the mode in pfSense to do that. System - Advanced - Admin Access - Protocol. Select HTTP, click Save. Or did you do that already?

rftweds · Dec 23, 2016, 9:23 PM

thats exactly what i did. and now we are here :-)

KOM · Dec 23, 2016, 9:44 PM

Anything in the System log? I have to leave now and I have no idea when I will return. If all else fails, snapshot the VM, save a config.xml backup and then reinstall fresh and restore your backup.

rftweds · Dec 23, 2016, 9:51 PM

System log shows nothing relevant.

sockstat shows nginx running on port 80
nothing on 443 only php-fpm listen on *

rftweds · Dec 24, 2016, 9:23 AM

so ok. i got it running.

Reinstalled pfSense (this time i selected http) then restored the config (no problems with that)

it works now, i can access on http

thanks for the help