Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    GUI accessible, can't block webgui access on all interfaces, unless WAN

    Scheduled Pinned Locked Moved webGUI
    8 Posts 3 Posters 677 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      Bognad
      last edited by

      I have configured web access on 8087 port, disable antilockout rule.
      I have created some rules to reject acooections on 8087 port, but i have access to webgui via interfaces. I have no packets in packet counter.
      pfsn.JPG

      1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan
        last edited by Gertjan

        None of your firewall rules are used.
        You're hiding the interface, but I guess it's not the right one.

        edit : if your placed these rules on the "Floating Interface", you should set the Quick option ( see https://docs.netgate.com/pfsense/en/latest/firewall/floating-rules.html for how to use floating rules ).

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 1
        • B
          Bognad
          last edited by

          Thanks for answering.
          I do not use floating rule.pfsn2.JPG

          1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan
            last edited by

            I used this rule to test :

            1c818110-251a-490d-92d1-5966f8a8b81d-image.png

            The PC I'm using right now has 192.168.1.6.
            When I activated the rule and reset firewall states ;) , I could not access pfSense any more. I had to use another PC - not being 192.168.1.6 - to gain access again.

            Btw : hiding interface names ? Why ? They are just name tags.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            B GertjanG 2 Replies Last reply Reply Quote 1
            • B
              Bognad @Gertjan
              last edited by

              @Gertjan
              hiding interface name... bcz i am paranoid)

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by johnpoz

                @Bognad said in GUI accessible, can't block webgui access on all interfaces, unless WAN:

                bcz i am paranoid)

                An interface name?? Wow!! Lay off the drugs dude!

                Keep in mind if there is an existing state, that would allow.. When you create block/reject rule - you need to flush any existing states that rule would of blocked. States are evaluated before rules.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • GertjanG
                  Gertjan @Gertjan
                  last edited by

                  @Gertjan said in GUI accessible, can't block webgui access on all interfaces, unless WAN:

                  When I activated the rule and reset firewall states

                  =>

                  9a2f11c1-c522-4908-bd07-c58ac6a04a3e-image.png

                  Check the box and hit reset.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Or you can just find the specific state or states in the table and kill it/those. But sure a full flush works too ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.