How to disable http referrer check using ssh

[pola090]

i would like to know the command to disable http referrer checks

[AhnHEL]

Are you speaking of the checkbox in the GUI under System/Advanced/Admin Access?

[pola090]

Yes unfortunately i dont have gui access  i only have ssh

[dhatz]

I can think of two ways:

1. Edit the config.xml file by hand (from ssh using vi) to add the nohttpreferercheck (note: small typo here, if any dev is watching, it should be nohttpreferrercheck) option in section
2. Connect to pfsense with ssh, then instruct your browser to tunnel web traffic using socks over SSH (exact configuration depends on the ssh client)

[jimp]

If you're on 2.0.2 or 2.1:

pfSsh.php playback disablereferercheck

If you're on 2.0 or 2.0.1, you can go into the PHP shell and execute the equivalent set of commands as the script does:

global $config;

$config = parse_config(true);

$config['system']['webgui']['nohttpreferercheck'] = true;

echo "Disabling HTTP referer check...";

write_config("PHP shell disabled HTTP referer check");

echo "done.\n";

[dhatz]

@jimp:

pfSsh.php playback disablereferercheck

I know I'm nitpicking but should it be spelled with two "r"s ?

referrercheck

[jimp]

No, no it should not.

http://en.wikipedia.org/wiki/HTTP_referer

[dhatz]

LOL, indeed you're right. Live and learn :)

[jimp]

Well if it were any other use of the word, you'd be right… but the misspelling made it into the spec and we're stuck with it now. :-)