You may be getting overruled by the self protecting hidden rules of pfsesne.
System -> Advanced -> [Admin Access] -> Anti-lockout
Alternatively, Services -> DNS Forwarder -> host overrides … could point
internal machines to the DMZ address instead of the outside address when they
lookup the name.
It is possible that you are just trying to do too many things with a single IP
address to safely make them all happen. Disabling PFSense’s idiot-proofing
features may be your best path forward. And do your link testing with wget or
checklink. Web browsers often cache a http_redirect in a kind of permanent
manner, not even look at the server for changes. wget doesn’t have enough of a
brain to suffer from such brain damage.
ED.
> On 2015, Apr 19, at 11:13 PM, Bob McClure Jr <[email protected]> wrote:
>
> On Sun, Apr 19, 2015 at 07:51:24PM -0700, Kenward Vaughan wrote:
>> On 04/19/2015 06:37 PM, Bob McClure Jr wrote:
>> ...
>>
>>> Now if anyone has a clue about this apparent Firefox brain damage, I'm
>>> all ears. I just restarted Firefox, and it's still hosed.
>
> Well, I take back what I took back, that is, Firefox brain damage. I
> just discovered that two other applications fail the same way. The
> other affected apps are wget and checklink. The latter is a Perl link
> checker from W3C that uses the LWP::RobotUA, LWP::UserAgent, and
> Net::HTTP::Methods modules. I can work around the wget problem, but a
> checklink failure is a show-stopper. We use that to check for broken
> links in new and modified web pages. Those two apps are run from the
> file server on the LAN to the web sites on the DMZ (OPT1). The
> Firefox problem is on my workstation on the LAN. Both of those are
> Linux CentOS machines. Interestingly enough, my wife's Win7 Firefox,
> also on the LAN, does not have a problem.
>
> I'm lobbing this back into pfsense's court.
>
>> My first check is to hide the default user profile (make a new one
>> to use without copying over anything from the old), and see if that
>> takes care of things. If it does, then selectively pull back in
>> Good Things (passwords, etc).
>
> Thanks for the hint, but it appears not to be (just) a Firefox
> problem.
>
>> Kenward
>> --
>> In a completely rational society, the best of us would aspire to be
>> _teachers_ and the rest of us would have to settle for something less,
>> because passing civilization along from one generation to the next
>> ought to be the highest honor and the highest responsibility anyone
>> could have. - Lee Iacocca
>
> Cheers,
> --
> Bob McClure, Jr. Bobcat Open Systems, Inc.
> [email protected] http://www.bobcatos.com
> "Know this, you and all the people of Israel: It is by the name of
> Jesus Christ of Nazareth, whom you crucified but whom God raised from
> the dead, that this man stands before you healed. He is 'the stone you
> builders rejected, which has become the capstone.' Salvation is found
> in no one else, for there is no other name under heaven given to men
> by which we must be saved." Acts 4:10-12 (NIV)
> _______________________________________________
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
