Login page branding

flood

Hello Everyone,

I have a PFsense installation that is exposed to the Internet. Not by my choice. I don't want my installation to be advertising it's pfense.

Example:

https://www.exploit-db.com/google-hacking-database/?action=search&ghdb_search_cat_id=0&ghdb_search_text=pfsense

I'd like to remove the licensing and anything mentioning pfsense from the login page only. How can I achieve this?

Derelict

Close the port.

kejianshi

Nice try. Creative approach.

If I were the guys at pfsense I'd handle the branding for him for free and donate some startup cash to open a small kiosk for selling it….

flood

See for yourself

https://www.google.com/search?q=intitle:Login%20%22Login%20to%20pfSense%22%20%22Password%22%20%22LLC%22

kejianshi

Its very unlikely that someone could own a pfsense but not control if its gui is exposed.
If its exposed, like mentioned before, close the port.
If you need admin access on a public interface, set up a vpn to allow access.

It would be somewhere between crazy and foolish for people at pfsense to help you remove branding.

ivor

We're not going to help you with that. Instead, you can learn doing it the right way. Here are your options:

allow access to only certain IP's to access WebGUI (this can be dynamic DNS address too)
use a different port for WebGUI, but better if you don't expose WebGUI at all.
use a VPN and don't expose WebGUI to everyone.
just don't expose WebGUI access to the web.

These are you options. Everything else is wrong.

flood

Thank you for the quick response.