Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Web GUI Access from Internet

    Scheduled Pinned Locked Moved Firewalling
    35 Posts 4 Posters 3.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cpatte7372
      last edited by

      Hello Members

      I have configured pfSense to allow me access to pfsense from the internet as shown in the attached image. However, I'm still unable to connect over the WAN interface.

      Can someone help me please help?

      Cheers

      Carlton

      pf.PNG
      pf.PNG_thumb

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        Bad idea…

        Are you opposed to SSH or VPN?

        If you are hell bent on having a very insecure set up, I wouldn't allow 443 on the wan.

        Rather, I would port forward TCP port 443 from the wan to the pfsense lan IP (default is 192.168.1.1)

        1 Reply Last reply Reply Quote 0
        • C
          cpatte7372
          last edited by

          Kej,

          Thanks for replying.

          I just want to see it working.

          After that I will remove it.

          Can you help?

          Cheers

          1 Reply Last reply Reply Quote 0
          • chpalmerC
            chpalmer
            last edited by

            Change destination to "Wan Address" from the list.

            Triggering snowflakes one by one..
            Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

            1 Reply Last reply Reply Quote 0
            • K
              kejianshi
              last edited by

              I've done this with VMs numerous times out of necessity for a few minutes to make some changes before blocking it.

              Make a NAT rule under firewall > NAT
              When the rule pops up, leave most of it alone.

              go to destination range and type in 443 in both blanks

              redirect target ip - enter the pfsense lan IP (192.168.1.1 is default)

              redirect target port - 443

              Thats about it…

              You should delete your existing rule that you posted earlier.

              After you try this rule you just made you should probably delete it pretty fast also (-;

              1 Reply Last reply Reply Quote 0
              • C
                cpatte7372
                last edited by

                Kej

                I followed your instructionns.

                Are you now saying I should be able to access my Web GUI from any internet connection?

                Cheers

                1 Reply Last reply Reply Quote 0
                • C
                  cpatte7372
                  last edited by

                  Kej

                  I tried your suggestion, but I wasn't able to access my web gui with address https://192.168.1.1/

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    Yeah - I'm in Manila and I just added that (very inadvisable) rule to a personal box of mine in the states and it worked perfectly…
                    Then I promptly deleted the rule...

                    1 Reply Last reply Reply Quote 0
                    • KOMK
                      KOM
                      last edited by

                      I tried your suggestion, but I wasn't able to access my web gui with address https://192.168.1.1/

                      I'm not sure how you think you're going to route to a non-routable private address from the Internet…

                      1 Reply Last reply Reply Quote 0
                      • K
                        kejianshi
                        last edited by

                        hehe - OK

                        That IP is the one you forward too…

                        What you type into your browser is https://your pfsense public IP

                        1 Reply Last reply Reply Quote 0
                        • C
                          cpatte7372
                          last edited by

                          ;)

                          OK, inserted in my browser https://pfsense public ip address and I got web page is not available.

                          The following is my configuration

                          pf1.PNG
                          pf1.PNG_thumb
                          pf2.PNG
                          pf2.PNG_thumb

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            Is your lan interface IP 192.168.1.1?

                            1 Reply Last reply Reply Quote 0
                            • C
                              cpatte7372
                              last edited by

                              Hi Kej

                              Yes it is.

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                And are you outside the lan on some other computer or are you trying to access this on a computer connected to pfsense?

                                1 Reply Last reply Reply Quote 0
                                • C
                                  cpatte7372
                                  last edited by

                                  Kej

                                  I'm outside the lan on some other computer

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kejianshi
                                    last edited by

                                    Then it should work unless you have some block rules somewhere, the wrong public ip or have some other settings messed up elsewhere.

                                    Once its working, don't forget to change your username / pass to admin/admin and post your public IP here.

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      kejianshi
                                      last edited by

                                      I just had a really bad sneaking suspicion that I just have to ask…

                                      What is the WAN of the pfsense hooked up to?

                                      If pfsense is plugged into a MODEM (not a router) and the ISP isn't blocking 443 this should already be working.

                                      If this is plugged into a ROUTER or a COMBO modem router and your pfsense is showing some private IP (like 192.168.x.x) on the WAN interface in the gui, this isn't going to be so simple.

                                      1 Reply Last reply Reply Quote 0
                                      • C
                                        cpatte7372
                                        last edited by

                                        Kej

                                        I'm not actually on some other computer… I'm on my own computer that has internet access. However, my pfSense has been deployed on ESXi host.

                                        pfSense has a public ip address as well as a LAN address.

                                        I can connect via LAN but can't connect via WAN. I know the pfSense WAN interface is configured corrected with a public ip address because I can ping 8.8.8.8 and any other public ip address from pfSense interface.

                                        Cheers

                                        1 Reply Last reply Reply Quote 0
                                        • K
                                          kejianshi
                                          last edited by

                                          Does "my own computer" have a different public IP than pfsense wan?

                                          You can always PM me your public IP and I can try it from here….

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            cpatte7372
                                            last edited by

                                            'My own computer', has an ip address assigned to by Virgin Media of 192.168.0.1.

                                            So basically, what I'm trying to do is access my pfsense firewall from any computer that has an internet connection

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.