Results 1 to 4 of 4
  1. #1
    Untanglit
    Join Date
    Feb 2021
    Posts
    24

    Default Locked out of web gui, how to recover?

    I accidentally unchecked the HTTPs access rules when tweaking some other custom access rules I have, and as soon as I pressed saved I realized I just locked myself out.

    I do not have the firewall connected to untangle command center.

    Is there a way to re-enable the access rule from local KVM access?


    Resetting the firewall is not an option.
    Last edited by erasedhammer; 06-01-2021 at 11:19 AM.

  2. #2
    Untanglit
    Join Date
    Feb 2021
    Posts
    24

    Default

    I solved my problem, but I want to leave a comment here because I have not seen a single post with the same problem.

    I had to reboot the firewall to get into text administration mode (second to last entry at the boot menu).
    My console session was screwed up (display was outputting in wrong resolution). Threw up a quick reverse shell with netcat (its on untangle already), then got a remote bash shell and went to work on the iptables INPUT chain. Not required, I just couldnt read the bash prompt, and xrandr couldnt find the display.

    The access rules for untangle are applied at the 1st rule of the INPUT chain, then a deny rule directly after. (sudo iptables -t filter -L INPUT --line-numbers -n -v)
    For the easiest method, find your LAN interface (ip addr or sudo ifconfig), then just run sudo iptables -I INPUT 1 -i LANINTERFACE -j ACCEPT
    You should be able to log in again. Any changes made to the access rules in the gui will overwrite changes made directly to iptables (so your temporary modification will disappear).

    Hopefully this helps some other bonehead who locks themself out

  3. #3
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    9,620

    Default

    You could have used Command Center to remote in.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  4. #4
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,024

    Default

    Advanced is advanced for a reason!
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2