HTTP_REFERER issue if changing the LAN IP in setup wizard
In the setup wizard if you change the LAN IP address, you get to the next page to set a password, but when continuing from that page you go straight to a block page saying:
"An HTTP_REFERER was detected other than what is defined in System -> Advanced (https://192.168.1.1/wizard.php?xml=setup_wizard.xml). If not needed, this check can be disabled in System -> Advanced -> Admin."
The user is then locked out of the system, they will not get a proper IP from DHCP, and the new password they set won't work. The only thing you can do is unplug power from the pfsense appliance, or connect to it via console to reboot it so that the changes are applied.
After reboot it seems to be fine.
Confirmed with 2.4.3-p1
Store the old LAN IP address and temporarily add it to the alt hostnames to work around a referer check issue in the setup wizard. Fixes #8524
#1 Updated by Jim Pingle about 1 year ago
- Category set to Web Interface
- Assignee set to Jim Pingle
- Priority changed from High to Normal
- Target version set to 2.4.4
- Affected Architecture set to All
I can replicate this now, not sure why it didn't happen to me before. It happens in the wizard when run from the LAN side because once past the LAN IP address screen of the wizard,
get_configured_ip_addresses() returns the new address but the new address is not yet on the interface.
I have a fix, will push shortly.
OK, should I log it under hardware (since this is on a netgate appliance vs. a CE image running on my own hardware)?
I can reliably reproduce it by just changing the LAN IP in the Admin Web UI. I get the same error when trying to load pages on the UI and this via the console & shell:
- Welcome to pfSense 2.4.3-RELEASE-p1 (amd64) on pfSense ***
WAN (wan) -> lagg0.4090 -> v4: x.x.x.x/29
LAN (lan) -> lagg0.4091 -> v4: 10.x.x.1/24
OPT1 (opt1) -> ix0 ->
OPT2 (opt2) -> ix1 ->
lagg0.4091: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
inet6 fe80::1:1%lagg0.4091 prefixlen 64 scopeid 0x15
media: Ethernet autoselect
vlan: 4091 vlanpcp: 0 parent interface: lagg0
Gotcha, I wasn't sure since the appliance uses a special image. Posted: https://forum.netgate.com/topic/133117/xg-7100-appliance-http_referer-issue-when-changing-lan-ip-in-webgui