• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Unable to Access WebConfigurator UI and Unable to SSH into pfsense

Scheduled Pinned Locked Moved General pfSense Questions
27 Posts 5 Posters 4.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    stephenw10 Netgate Administrator
    last edited by Jan 5, 2024, 11:35 PM

    @dougs said in Unable to Access WebConfigurator UI and Unable to SSH into pfsense:

    https://imgur.com/a/fgXHIEx

    Yes that shows the anti-lockout rules are present on LAN. But also that they have passed nothing; 0 bytes/packets/states.

    So either some other rule is passing them. Somehow. Or maybe the traffic never reaches pfSense. Or perhaps it's being forwarded.

    You could try running a tcpdump from the CLI while you try to connect to confirm it's at least trying.

    J 1 Reply Last reply Jan 6, 2024, 12:37 AM Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator @stephenw10
      last edited by Jan 6, 2024, 12:37 AM

      @stephenw10 said in Unable to Access WebConfigurator UI and Unable to SSH into pfsense:

      CLI while you try to connect to confirm it's at least trying

      could be sending it to something else.. sniff is yeah what I would do - have access to console, sniff on pfsense itself to validate traffic gets there.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 1
      • D
        dougs
        last edited by Jan 14, 2024, 5:24 PM

        About a week ago, I decided to reset the pfSense firewall to factory defaults from the console menu and left it running without changing any configuration options aside from setting the WAN/LAN interfaces, modifying the console dashboard and creating a DHCP server IP address range. Everything else was left as is.

        I was able to access the Web GUI for a couple days. Just 2 days ago, I discovered I could not access it nor could I ssh into it!

        Restarting the Web Configurator does not allow me to access the firewall web site.

        Executing pfctl -vvsr | grep -A 4 anti shows this:
        PXL_20240114_163414107_2024-01-14_08-40-18.jpg
        https://imgur.com/a/J2mbVCx

        Tried running: #easyrule pass lan tcp <my computer IP addr> <firewall LAN addr> 443 and it states the rule was successfully created. However, I cannot access the LAN address of the firewall nor could I ping it from the computer IP address. Tried it from another computer with similar results.

        Did a zpool scrub pfSense and did not indicate any errors.

        Every system on the LAN side can access the Internet normally-- including our Samsung TV sets and an Enphase IoT device among others.

        This is on an older Protectli FW6C purchased in 2021. https://protectli.com/wp-content/uploads/2019/01/FW6C-Datasheet-190104.pdf

        At this point, I am not sure what else to do aside from reformatting the drive and starting all over again. Please advise.

        J 1 Reply Last reply Jan 14, 2024, 6:02 PM Reply Quote 0
        • J
          johnpoz LAYER 8 Global Moderator @dougs
          last edited by Jan 14, 2024, 6:02 PM

          @dougs and no simple tcpdump?

          You could have no rules and completely wide open, still never works if your traffic never gets there..

          Your anti lock rule is there.. don't show any states.. Do a simple tcpdump when you try and get there..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • S
            stephenw10 Netgate Administrator
            last edited by Jan 14, 2024, 7:11 PM

            Mmm, that sure starts to look like it's just not hitting pfSense at all.

            N 1 Reply Last reply Jan 14, 2024, 8:06 PM Reply Quote 0
            • N
              NollipfSense @stephenw10
              last edited by Jan 14, 2024, 8:06 PM

              @stephenw10 said in Unable to Access WebConfigurator UI and Unable to SSH into pfsense:

              Mmm, that sure starts to look like it's just not hitting pfSense at all.

              Yes, sounds like possibly a bad cable...

              pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
              pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

              1 Reply Last reply Reply Quote 0
              • S
                stephenw10 Netgate Administrator
                last edited by Jan 14, 2024, 10:38 PM

                Since traffic can still reach external sites I'd say more likely a rogue dhcp server.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                  This community forum collects and processes your personal information.
                  consent.not_received