I am trying to disable the WEB interface from the public network/ When the web interface has listened on the 80 port, NAT rule (to a web server) doesn't work. I also tried to move web but to another port and created block rules in the firewall settings but I, however, can reach web GUI from an external network, How to disable web GUI from a non-lan network?
Dear Wusikijeronii,
Did you tick [disable web GUI redirect rule] when changing ports en setting to https? (system-settings-administration)
I think this (older) guide wil help you: https://medium.com/@jccwbb/website-protection-with-opnsense-3586a529d487 (https://medium.com/@jccwbb/website-protection-with-opnsense-3586a529d487)
(chapter 6)
I've found an option ` Disable anti-lockout` in Firewall > Settings > advanced and now blocking works