Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Lightsquid reports page has no protection

    Scheduled Pinned Locked Moved pfSense Packages
    8 Posts 2 Posters 3.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cylent
      last edited by

      is it possible to protect lightsquid reports with a password?

      i noticed if you goto http://<pfsenseip>/lightsquid/index.cgi you are immediately granted access.

      pls advise.</pfsenseip>

      1 Reply Last reply Reply Quote 0
      • C
        cylent
        last edited by

        anybody?

        i tried using .httaccess method but it simply isnt working.

        1 Reply Last reply Reply Quote 0
        • C
          cylent
          last edited by

          I find this to be a huge security hole because it bypasses admin for anybody on the lan that knows the correct URL …

          anybody want to help with this please?

          1 Reply Last reply Reply Quote 0
          • J
            jalgaz
            last edited by

            i think you can block access with rules to this ip

            JuanjoA
            Saludos

            –-----------------------------------
            saludos
            JuanjoA

            1 Reply Last reply Reply Quote 0
            • C
              cylent
              last edited by

              it would be nice if lightsquid had a port i can use to block with.

              1 Reply Last reply Reply Quote 0
              • C
                cylent
                last edited by

                and yet still no workable response from the pfsense devs.

                i realize lightsquid is an external package but as soon as its accepted into the pfsense package system then pfsense is responsible for it.

                1 Reply Last reply Reply Quote 0
                • J
                  jalgaz
                  last edited by

                  i think this is  a bug.
                  really, with rules i cant block the access to the page of lightsquid.

                  I tried with squid and without squid, with same result, access garanted.

                  it would be nice if lightsquid had a port i can use to block with.

                  The gui use port 80 or 443 (http / https)

                  JuanjoA

                  –-----------------------------------
                  saludos
                  JuanjoA

                  1 Reply Last reply Reply Quote 0
                  • C
                    cylent
                    last edited by

                    so what you want me to block port 80 then?
                    i'd have to shift the webgui to another port…
                    :-[ :-[

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.