<![CDATA[Still can't get in to web UI using dynFQDN after disabling http_referrer check]]>2.0-BETA4  (i386)
built on Thu Nov 11 23:42:14 EST 2010
FreeBSD 8.1-RELEASE-p1

I can log in using the IP address, but using the hostname (on LAN) or FQDN (dyndns) on WAN causes the http_referrer error, even though I have disabled that function.

]]>https://forum.netgate.com/topic/27996/still-can-t-get-in-to-web-ui-using-dynfqdn-after-disabling-http_referrer-checkRSS for NodeTue, 09 Jun 2026 05:58:42 GMTFri, 12 Nov 2010 16:14:42 GMT60<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Sun, 05 Dec 2010 16:27:34 GMT]]>Had an opportunity to test with the version below - "CARP VIP problem" is gone, thanks!

2.0-BETA4 (i386)
built on Sat Dec 4 01:44:52 EST 2010

]]>https://forum.netgate.com/post/255234https://forum.netgate.com/post/255234Sun, 05 Dec 2010 16:27:34 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Wed, 24 Nov 2010 11:00:30 GMT]]>It should as of yesterday.

]]>https://forum.netgate.com/post/254001https://forum.netgate.com/post/254001Wed, 24 Nov 2010 11:00:30 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Wed, 24 Nov 2010 01:02:07 GMT]]>For build Sun Nov 21 02:37:38 EST 2010 I may confirm the following:

  • disabling HTTP_REFERER enforcement check allows connecting to pfSense via any IP/hostname
  • when HTTP_REFERER check is enabled, the error still apears when connecting via virtual IP (I'm using CARP type virtual IPs); when connecting to "real" interface's IP adress - error does not appear

IMHO: there's some kind of mistake in HTTP referer check logic - it should consider virtual IPs, but it does not (at least CARP type)

]]>https://forum.netgate.com/post/253937https://forum.netgate.com/post/253937Wed, 24 Nov 2010 01:02:07 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Fri, 19 Nov 2010 09:32:54 GMT]]>http://redmine.pfsense.org/projects/pfsense/activity

]]>https://forum.netgate.com/post/253300https://forum.netgate.com/post/253300Fri, 19 Nov 2010 09:32:54 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Fri, 19 Nov 2010 09:16:07 GMT]]>Now (2.0-BETA4 (i386) built on Thu Nov 18 23:22:28 EST 2010 ) its working! thx guys!  :)

btw, is there a bugtracker of some sorts?

]]>https://forum.netgate.com/post/253299https://forum.netgate.com/post/253299Fri, 19 Nov 2010 09:16:07 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Wed, 17 Nov 2010 15:15:38 GMT]]>For me, it works fine, until I connect my second wan (opt5), then I have to use the FQDN to access the router.

]]>https://forum.netgate.com/post/253052https://forum.netgate.com/post/253052Wed, 17 Nov 2010 15:15:38 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Wed, 17 Nov 2010 09:31:32 GMT]]>I have the same problem. Entering the FQDN didn't help, and neither does disabling the check.

I'm currently on
2.0-BETA4 (i386)
built on Tue Nov 16 19:31:14 EST 2010

Also, maybe this is relevant: my Webgui is not running on port 80 or 443, but on port 81 with https enabled.

]]>https://forum.netgate.com/post/253039https://forum.netgate.com/post/253039Wed, 17 Nov 2010 09:31:32 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Sun, 14 Nov 2010 23:50:38 GMT]]>I had the same problem…

I am connecting to my box with https://hostname:8443. What I did is enter the FQDN as hostname.domain.local into the 'Alternate Hostnames' field under advanced and then it worked for me. No need to disable the http_referer check...

]]>https://forum.netgate.com/post/252799https://forum.netgate.com/post/252799Sun, 14 Nov 2010 23:50:38 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Sun, 14 Nov 2010 18:42:17 GMT]]>Just experienced similar problem with the following current snapshot:

2.0-BETA4 (i386)
built on Sun Nov 14 03:54:29 EST 2010

1. Disabling HTTP_REFERER enforcement check does not solve the problem - it appears that this setting is not working at all.
2. When accessing web UI by real IP addresses on any interface - everything works fine.
3. When trying to access web UI on any interface by any of the virtual IP addresses, getting HTTP_REFERER check error.
4. Tried to add DNS records to internal zone which pointed to real internal interface IP address and then added that record to "Alternate hostnames" in pfSense settings: HTTP_REFERER error still appeared.

]]>https://forum.netgate.com/post/252787https://forum.netgate.com/post/252787Sun, 14 Nov 2010 18:42:17 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Sun, 14 Nov 2010 00:40:40 GMT]]>2.0-BETA4 (i386)
built on Sat Nov 13 09:16:47 EST 2010
FreeBSD 8.1-RELEASE-p1

I updated today from the Nov 7 release and experienced the HTTP_REFERER error attempting to reach any page but the dashboard.  The dashboard also has problem displaying update status.  Accessing via IP gave me full access.  Disabling HTTP_REFERER test on the admin page did not resolve this issue.  Adding my hostname and FQDN to the Alternative Hostnames list resolved the majority of this issue (I am able to access all pages again), even with the HTTP_REFERER test enabled although the update status in the dashboard still reports an error when not using a FQDN.  My LAN DNS server is first on my DNS list for resolving and my non-FQDN resolves on the command line.  I haven't looked very deeply into this beyond the above but I am available for further details/testing.

]]>https://forum.netgate.com/post/252737https://forum.netgate.com/post/252737Sun, 14 Nov 2010 00:40:40 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Sun, 14 Nov 2010 00:34:01 GMT]]>i fixed it just changed the name of my PFSense and the domain, i setted the name like the host in no-ip.org and no-ip.org in the domain.

]]>https://forum.netgate.com/post/252736https://forum.netgate.com/post/252736Sun, 14 Nov 2010 00:34:01 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Sat, 13 Nov 2010 23:23:59 GMT]]>http_referrer check is also not effected by the alternate hostnames list, even though the Admin page says it does.

]]>https://forum.netgate.com/post/252733https://forum.netgate.com/post/252733Sat, 13 Nov 2010 23:23:59 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Sat, 13 Nov 2010 23:12:28 GMT]]>I have the same problem.

]]>https://forum.netgate.com/post/252732https://forum.netgate.com/post/252732Sat, 13 Nov 2010 23:12:28 GMT<![CDATA[Reply to Still can't get in to web UI using dynFQDN after disabling http_referrer check on Fri, 12 Nov 2010 21:23:50 GMT]]>same here

]]>https://forum.netgate.com/post/252652https://forum.netgate.com/post/252652Fri, 12 Nov 2010 21:23:50 GMT