Re: [pfSense] php error on login screen

2014-05-04 Thread Lars Wuerfel

Hello Volker,


On 05/05/2014 07:51 AM, Volker Kuhlmann wrote:

An HTTP_REFERER was detected other than what is defined in System ->
Advanced (https://x.x.x.x/). You can disable this check if needed in
System -> Advanced -> Admin.


I had this some time ago, when I defined a virtual IP
(IP alias) to my LAN Interface, and then tried to login to this
virtual IP. When I pointed the browser to the "real" IP, login
was possible.

Did you define IP aliases, and your DNS is pointing to an alias IP?

Kind regards
Lars
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list


[pfSense] php error on login screen

2014-05-04 Thread Volker Kuhlmann
Warning: Invalid argument supplied for foreach() in /etc/inc/util.inc on 
line 838 

  You are accessing this router by an IP address not configured locally, 
which may be forwarded by NAT or other means.
  If you did not setup this forwarding, you may be the target of a man-
in-the-middle attack.   


That is after upgrading to 2.1.3.

I can also no longer log in to the web gui.
pfsense warns about a DNS rebinding attack and to use an IP address
instead. With an IP address it says

   An HTTP_REFERER was detected other than what is defined in System -> 
Advanced (https://x.x.x.x/). You can disable this check if needed in 
System -> Advanced -> Admin.

Which would be all good, if one could log in to change it.

Volker

-- 
Volker Kuhlmann
http://volker.top.geek.nz/  Please do not CC list postings to me.
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list


[pfSense] squidguard blacklist absent after upgrade

2014-05-04 Thread Volker Kuhlmann
Quick note for those using squidguard with a blacklist:

After upgrading from pfsense 2.1.2 to 2.1.3, squidguard is running, but
the blacklist is absent in the BUI and needs to be reloaded manually.
If one doesn't notice that there is possibly less filtering being
performed than expected.

Volker

-- 
Volker Kuhlmann
http://volker.top.geek.nz/  Please do not CC list postings to me.
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list