Webinterface PR_END_OF_FILE_ERROR only on WAN

[clownschiff]

Dear OPNsensers,

I have a weird problem with one of our OPNsenses and I can't find the reason for the behaviour.

The Webinterface is bound to port 4444 and reachable by a few public IPs on the WAN interface. My problem is, that when I want to access the GUI through one of these IPs, it works for a few minutes and then just breaks with a PR_END_OF_FILE_ERROR. I have to restart the firewall or reset the WAN interface (PPPoE over VLAN 7) for it to work again (for a few minutes).

Sometimes, but not always I can still do a

Code Select Expand

curl -v -k https://1.2.3.4:4444 and it works and sometimes not even SSH works anymore on the WAN interface. I also changed the certificate for the GUI, but no success. Firewall rules are all in place.

This is a curl when the connection does not work:

Code Select Expand

~# curl -v -k http://1.2.3.4:4444
*   Trying 1.2.3.4:4444...
* Connected to 1.2.3.4 (1.2.3.4) port 4444 (#0)
> GET / HTTP/1.1
> Host: 1.2.3.4:4444
> User-Agent: curl/7.88.1
> Accept: */*
>
* Empty reply from server
* Closing connection 0
curl: (52) Empty reply from server
This is the analog problem with SSH.

Code Select Expand

ssh -v root@1.2.3.4
OpenSSH_for_Windows_9.5p1, LibreSSL 3.8.2
debug1: Reading configuration data C:\\Users\\my.user/.ssh/config
debug1: Connecting to 1.2.3.4 [1.2.3.4] port 22.
debug1: Connection established.
debug1: identity file C:\\Users\\my.user/.ssh/id_rsa type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_rsa-cert type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_ecdsa type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_ecdsa-cert type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_ecdsa_sk type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_ed25519 type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_ed25519-cert type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_ed25519_sk type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_ed25519_sk-cert type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_xmss type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_xmss-cert type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_dsa type -1
debug1: identity file C:\\Users\\my.user/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_for_Windows_9.5
kex_exchange_identification: Connection closed by remote host
Connection closed by 1.2.3.4 port 22
This is really confusing since I don't know where to even look at now.