web gui access issues
-
so i have a couple of pfsense machines i watch over. one of them, a 7100 running pfsense plus 25.07.1 randoml;y blocks me from getting to the webadmin. I have the access restricted to two ddns hosts, my laptop and a machine qat my office. The only way to get it back is to reboot the machine. nothing else i try gets access to come back. Any pointers are appreciated.
-
@hescominsoon put them in separate aliases/rules:
https://forum.netgate.com/topic/196927/filterdns-has-stopped-resolving-hostnames-in-firewall-aliases/26 -
@hescominsoon said in web gui access issues:
I have the access restricted to two ddns hosts
ddns hosts ?
Can you explain ? -
Sadly, filterdns currently has bugs (some very old) that make it unreliable. Here are just a handful of open tickets
- #13772: Changing the alias resolve interval to the default value does not take effect after saving
- #13792: Filterdns assumes sets of resolved addresses for each hostname are nonintersecting
- #13793: filterdns does not reconcile modelled tables with the current state of filter tables
- #14734: Alias FQDN resolving issue results in incomplete tables
- #15226: Tables for mixed aliases lists occasionally do not contain all records from the alias list
Thus, not a great idea if that's your only way of accessing a remote pfSense system. I would have another method handy in case, e.g. a VPN.
-
@luckman212 that's odd. it's only the 7100 that is having this issue. The 4200 is not having this problem. i am wondering if it's a hardware issue with the 7100?
-
@hescominsoon Well the above bugs are not hardware dependent. Does the 4100 have the two FQDNs in one alias or two? Having them separate is the workaround.
-
@SteveITS said in web gui access issues:
@hescominsoon Well the above bugs are not hardware dependent. Does the 4100 have the two FQDNs in one alias or two? Having them separate is the workaround.
both have two fqdn addresses in the same alias..the 4200 is not having this issue..the 7100 is the one getting hit with this. I got the workaround implemented..but it's weird it's only the older machine that is having this issue even with both running the latest firmware.
-
@luckman212 oh i have my own screenconnect self hosted server to get around it...but the most convenient is the web gui...:)
