optional interface Ip is showing pfsense GUI

abarna

LAN pFsense web GUI should be accessible to admin only (LAN IP).
But in my case iam able to fetch pFsense GUI using other optional interface IP also

Pfsense interface -IP 192.168.1.1
optional interface IP 192.168.60.1 -Using this ip am also getting pfsense UI.
How to block the optional interface Getting Pfsense GUI from browsing?Please give steps

johnpoz

@abarna the gui listens on all interfaces, if you don't want specific networks to access the gui put in a firewall rule that blocks it. The "this firewall" alias can come in handy since it lists all IPs of pfsense.

example: Here is set of rules that allows specific things to pfsense IP on that network from that network, but then also blocks all other access to pfsense other IPs

abarna

@johnpoz ok understood .What if i want to acess the Web gui in other VM using pfsense IP only.Not using optional interface ip.then what should i do?

stephenw10

Add a block rule on the OPT interface to prevent it. So probably from the OPT subnet to the OPT IP on port 443.

johnpoz

@abarna said in optional interface Ip is showing pfsense GUI:

eb gui in other VM using pfsense IP only.Not using optional interface ip.then what should i do?

Allow what you want, where you want - the whole point of a firewall ;)

Like in my example - where I allow ping, dns and ntp to the firewall address before I block other access. Put your rule above where you block - based on what criteria you want - be it source IP, destination IP, port/protocol - whatever combo works for allowing what you want, etc.. Before you block.

Rules are evaluated top down, first rule to trigger wins, no other rules are evaluated after.