Pfsense accessible internally via WAN IP (lemmy.world)

submitted 1 year ago* (last edited 1 year ago) by root@lemmy.world to c/homelab@lemmy.ml

9 comments fedilink hide all child comments

So, I just realized that if i use my WAN IP in my browser from within my network, it brings me to my pfsense login page..

At first I panicked thinking this was also accessible externally, but luckily it is not.

I have rules in place to prevent devices from accessing the GUI unless they're part of an alias, however if I access it in this way, it bypasses the check.

Why is my WAN IP resolving to my pfsense login?

Edit: As just about everyone has mentioned, this seems like NAT Reflection, however I have this disabled everywhere I've found. Here is the setting in System>>Advanced>>Firewall & NAT as well as in the individual NAT rules as seen here

Outbound NAT

Port Forwards

you are viewing a single comment's thread
view the rest of the comments

[-] superb@lemmy.blahaj.zone 5 points 1 year ago

Sounds like hairpin NAT. Don’t worry, the traffic never leaves your network

[-] root@lemmy.world 2 points 1 year ago

Thank you, that was the first thing I checked after having a near heart attack, haha. I thought the whole world could see my login for a second there.

this post was submitted on 17 Oct 2023

6 points (100.0% liked)

homelab

6534 readers

1 users here now

founded 4 years ago

MODERATORS

CMonster@lemmy.ml