pfSense » pfSense Packages

The GUI is misbehaving. I'm unable to add a specific ACL via the GUI. Simply adding "http-request redirect scheme https code 301 if !{ ssl_fc }" to the "Advanced pass thru" fixed it but that should not have to be done.

I've written extensively on the forum about this problem (with screenprints): see https://forum.netgate.com/topic/139314/haproxy-configuration-problem-gui-causing-it

Basically the steps to reproduce the problem are:

1. Create a frontend, name it "test", save,
2. Open "test", add an ACL, notice there is no "Traffic is ssl (no value needed):" option,
3. Just to continue, name the ACL "https", expression="Host starts with:", value="https", save,
4. Open "test" once again, edit the ACL, notice now there is the "Traffic is ssl (no value needed):" option,
5. Change the expression to "Traffic is ssl (no value needed):", remove the value, save. Result: error (or the ACL was completely removed).

I tried above with both the haproxy package (package version 0.59_15, haproxy version 1.7.11) and the haproxy-devel package (0.59_15, 1.8.14).