An HTTP_REFERER was detected other than what is defined in System | Disabled in System > Advanced > Admin Access.

Modesty

Hi

I have a hompage on my NAS. In this page I have buttons for quick go to different locations

For my pfSense box i get this error
An HTTP_REFERER was detected other than what is defined in System > Advanced (http://router.pfsense./). If not needed, this check can be disabled in System > Advanced > Admin Access.

I must add that I do custom DNS overrides for my devices on my network, so router 192.168.0.1 is http://router.pfsense, but only pfsense box stop this

Code in web page is:

<div class="button-container">
    <button class="custom-button" onclick="window.open('http://router.pfsense', '_blank')" style="background-color: ligthlue;">router</button>
  </div>

This page I dont understand what to do, and a bit scared to do a "test"

Any Idea how to fix this?

johnpoz

@Modesty why would you point router.pfsense to pfsense IP? Why would not use its actual dns record.. which would be what is setup in general

But as the error says either assign an alternate, or disable the check

Modesty

@johnpoz

Thanks for answer.

@johnpoz said in An HTTP_REFERER was detected other than what is defined in System | Disabled in System > Advanced > Admin Access.:

why would you point router.pfsense to pfsense IP?

what I do is

onclick="window.open('http://router.pfsense', '_blank') then the DNS override connect to my router, but router dont accept...

This is what I have:

@johnpoz said in An HTTP_REFERER was detected other than what is defined in System | Disabled in System > Advanced > Admin Access.:

Why would not use its actual dns record

Can you give an example did not quit get it.
(As my example that dont workin http://router.pfsense)

johnpoz

@Modesty use pfsense actual name in your link pfsense.localdomain, or add router.pfsense in your alternative. or change pfsense name to router.pfsense in the general settings.

Or just disable the check completely.

Modesty

@johnpoz said in An HTTP_REFERER was detected other than what is defined in System | Disabled in System > Advanced > Admin Access.:

Or just disable the check completely.

When I try to disabel this i get an error:

The following input errors were detected:
Alternate hostname is not a valid hostname.

This 3 ip's are stored from previus, dont know why there is 3...

due to this:

Shal I
1: delete all 3?
2: keep 1, 192.168.0.1?

johnpoz

@Modesty where did you get the idea you would put in an IP there.

To disable the check, you click the little check box that says disable it.

here I switched back to allowing just http so I could show you.. Here I created a host record to point router.pfsense to my pfsense.. See I get the error you are getting. Well same sort of error, since I am not linking to it from something else, but going direct I get the rebind error..

Then I added the alternate name - and now don't get the error when I access via http://router.pfsense

edit: still confused on using router.pfsense vs just pfsense.localdomain? If you want to use .pfsense as your local domain, then just change pfsense actual name to that in the general settings.

BTW the current recommend domain to use locally is home.arpa, I have started switching over to it on some of my devices - just haven't gotten around to changing pfsense as of yet. As certs expire for stuff I am using locally I change them to use home.arpa.. pfsense webgui cert still have like 3 some years left on it ;) Its from before browsers started balking at long certs and I had set them to 10 years..

Just haven't gotten the itch to change pfsense yet. If you want to use .pfsense go for it - but home.arpa would be better choice. But simple solution to your problem would just be change pfsense name to router.pfsense if that is what you want to refer to it as in your thing your creating.

Modesty

@johnpoz Thanks for helpingme.

WHen I tick the box and save it I get this error:

The following input errors were detected:
Alternate hostname is not a valid hostname.

This is due to 3 x IP's

Thats the problem now
What should be in feld Alternate Hostnames

johnpoz

@Modesty said in An HTTP_REFERER was detected other than what is defined in System | Disabled in System > Advanced > Admin Access.:

What should be in feld Alternate Hostnames

did you not see my image - if your pointing router.pfsense to there, then that is what should be in there..

Why would you put in the same IP 3 times even?? If your going to disable it, then nothing should be in the alternate hostnames box.

Modesty

@johnpoz said in An HTTP_REFERER was detected other than what is defined in System | Disabled in System > Advanced > Admin Access.:

did you not see my image

No, sorry, my eyes, and my tempo.

Thanks!