Access to Web Interface via Public IP

vitoreiter · Dec 28, 2016, 2:50 PM

If I type my public IP into my web browser with HTTPS I can access my web config for pfsense. How can I go about removing that feature and only allowing it through the local network… I have already removed the anti-lockout rule and set rules for my specific subnet to allow me in. I just need to remove WAN access to the interface.

doktornotor · Dec 28, 2016, 3:05 PM

There is no WAN access by default. You are seeing NAT reflection most likely.

vitoreiter · Dec 28, 2016, 3:16 PM

That is not it, I do have a static WAN IP though if that helps anything.

doktornotor · Dec 28, 2016, 3:20 PM

No, it doesn't help anything. Posting the WAN firewall rules would help. Once again, there is no WAN access by default, so I don't get the question here. If you added a rule for access there, then delete it. Otherwise, see the note about NAT reflection.

vitoreiter · Dec 28, 2016, 3:23 PM

Yeah, I could only access within the local network with the public IP. For example you wouldn't be able to. Should've tested this first. Sorry.