How can I remotely access the Web GUI? (the FAQ is down?!)

sofakng

I'm trying to read the FAQ on how to do this: http://faq.pfsense.org/index.php?action=artikel&cat=10&id=41&artlang=en

…but when I go to that page it says: "This entry is in revision and can not be displayed."

In fact, the entire FAQ system seems to be down because I can't access anything. I can search the FAQ and it tells me the number of results, but it doesn't list them and everything else is empty.

Does the Web GUI only support HTTPS outside access or something? If so, why doesn't it support regular HTTP?

Cry Havok

Have you created a firewall rule to allow remote access to the GUI?

sofakng

Yeah, I'm using regular HTTP for the Web GUI and I setup a firewall with these settings:

Protocol: TCP
Source: *
Port: *
Destination: WAN address
Port: 80 (HTTP)
Gateway: *
Schedule: *

I'm wondering if pfSense forces you to use HTTPS for outside connections to the Web GUI?

Cry Havok

Which interface did you create the rule on?

sofakng

It's on the WAN interface.

I've created an HTTPS firewall rule as well and changed the Web GUI to use HTTPS but it's still not accessible from the outside.

My two rules are located at the very top of the list directly underneath the "Block private networks" rule.

JeGr

Could you please post your NAT rules, too?
I see a LOT of port 80 rules for passing traffic created by the NAT tab. Do you have multiple IPs on the WAN side? If not, you can't port-forward port 80 multiple times to different internal IPs AND have the webgui reachable on the outside interface on the same port!

Greets Grey

rsw686

I have mine setup so I can access the webgui remotely. All I did was create a nat rule to the IP of the pfSense box and let it auto create the firewall rule. It is really as simple as that.

cmb

http://doc.pfsense.org/index.php/How_can_I_access_the_webGUI_from_the_WAN%3F

sofakng

I got it working…

Apparantly my problem was that my ISP blocks port 80 (which I completely forgot about). Eventually I got it working by just having one firewall rule.

I'm also using regular HTTP, so apparantly HTTPS is NOT required? (can anybody confirm that?)

cmb

It's not required, but passing your credentials over the Internet in clear text is NOT a good idea.