Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Force WebGUI Access over WAN

    webGUI
    3
    4
    775
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      JSP last edited by

      Alright, I surrender and am asking for assistance.

      I have a brand new instance of pfSense running on a box. It's intended to be used for VPN and internal routing for our rack in the datacenter. It currently only has one NIC and a public IP. I have access to the box "physically" by KVM.

      pfSense appears to be fine, the machine can ping out (indicating that network access is hunky dory). However, when I attempt to access the webGUI it times out, as expected because it's WAN. Ok, fine I added my IPs as allowed using easyrule for both http and https, no change. So I disabled pf all together using pfctl -d. Still no change. I can see my requests being blocked in the filter log but the logging obviously stops when I disable pf.

      What am I missing here and what configuration changes do I need to make to allow access to webGUI over the public IP?

      1 Reply Last reply Reply Quote 0
      • M
        misterpat last edited by

        You need to forward the port you chose through the firewall.

        1 Reply Last reply Reply Quote 0
        • J
          JSP last edited by

          Is there a command besides easyrule that I need to run? From my understanding that's what easyrule did was allowed it through pf for my IP

          1 Reply Last reply Reply Quote 0
          • johnpoz
            johnpoz LAYER 8 Global Moderator last edited by

            Are you hitting your wan from a rfc1918 IP?  If so those would be blocked before any rule you added is even looked at..  If your hitting your wan IP from rfc1918 space then you have to turn off the default of blocking that.. Which would be listed very top of your wan rules.

            Post your wan rules, and we can take a look see to what might be wrong..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

            1 Reply Last reply Reply Quote 0
            • First post
              Last post