Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't stop Web-Configurator on WAN

    Scheduled Pinned Locked Moved Firewalling
    5 Posts 3 Posters 398 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      DavidB
      last edited by

      Team, I'm at my wits end and hope you can help. For some reason I can access the web-configurator from the WAN port from my mobile device (or any other non-local device) on LTE. I know, there have been a multitude of posts on this, but hear me out. I just factory reset my pfSense box because I assumed that I borked something up or misconfigured a plugin (pfBlocker), but the reset should have eliminated all my errors. My setup is not particularly complicated.

      Current setup: Netgear Nighthawk CM (complete pass-through) --> pfSense --> Netgear Nighthawk AP (AP mode) --> various servers (some of which require port forwarding (80/443)

      Thanks for the assist.

      David

      GertjanG 1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        From the outside? Don't have a rule passing it.

        From the inside? Block connections to the webgui port for destination This Firewall (self).

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • D
          DavidB
          last edited by

          That's just it, the reset should have cleared any rule that allowed WAN access to the configurator and I didn't add any rules after the fact. Nonetheless I just accessed my firewall again via my mobile on LTE.

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by Derelict

            Then you have a rule passing it.

            Or you are not really accessing it from the outside like you think you are.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • GertjanG
              Gertjan @DavidB
              last edited by

              @DavidB said in Can't stop Web-Configurator on WAN:

              ... which require port forwarding (80/443)

              A faulty NAT rule might explain what you're seeing.

              Reset again, and do not change anything. Just make the WAN work and that it.
              Check that the GUI isn't available from WAN. As it isn't by default.
              Now add your own settings, pause after each step and test.
              You'll hit the "shouldn't do that" point rather easily.

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.