# Admin page returns 403 Forbidden; new install

**URL:** <https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178>\
**Category:** Help\
**Created:** [March 22, 2018, 6:03pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178 "2018-03-22T18:03:17Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 22, 2018, 6:03pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/1 "2018-03-22T18:03:17Z")

</div>

This is a brand new pi-hole install on a raspberry pi. I used the install script.

Script seems to have worked. Quickly scrolling text, but I did see some "red".

## Debug Token:

gal03c0hx2

After install, I tried to load the admin page, both locally and from another on same network. Both browsers return "403 - Forbidden"

This is the output from: curl -I [http://localhost/admin/](http://localhost/admin/)  
HTTP/1.1 301 Moved Permanently  
Location: [http://localhost/admin/](http://localhost/admin/)  
Date: Thu, 22 Mar 2018 18:01:11 GMT  
Server: lighttpd/1.4.35

Let me know if you need me to try anything.  
Thank you!

---

<div class="post-metadata">

**Author:** ![mibere](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mibere/32/18057_2.png) [@mibere](https://discourse.pi-hole.net/u/mibere)\
**Post date:** [March 22, 2018, 6:38pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/2 "2018-03-22T18:38:08Z")

</div>

Can you also try

`curl -I http://localhost/admin`

without trailing /

What's your operating system? Fedora?

---

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 22, 2018, 6:44pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/3 "2018-03-22T18:44:27Z")

</div>

My apologies, my earlier error was _without_ the trailing / (I included with it here by mistake)

If I include a trailing "/", then I get:  
HTTP/1.1 403 Forbidden  
Content-Type: text/html  
Content-Length: 345  
Date: Thu, 22 Mar 2018 18:39:12 GMT  
Server: lighttpd/1.4.35

The OS is Raspbian 8 (jessie)

---

<div class="post-metadata">

**Author:** ![mibere](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mibere/32/18057_2.png) [@mibere](https://discourse.pi-hole.net/u/mibere)\
**Post date:** [March 22, 2018, 6:50pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/4 "2018-03-22T18:50:35Z")

</div>

First restart your Pi and check if you can access the website with a browser.

Then please read the notes about Jessie in this blog post

[https://pi-hole.net/2018/02/14/pi-hole-v3-3-released-its-extra-special/](https://pi-hole.net/2018/02/14/pi-hole-v3-3-released-its-extra-special/)

---

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 22, 2018, 7:07pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/5 "2018-03-22T19:07:05Z")

</div>

The reboot fixed the "admin page not accessible" problem. -- thanks!  
And thanks for the heads-up about whitelisting issue with Jessie.

However, I see I have a new problem ... "FTL offline" and no stats are showing.  
But let me look into this. I see a help page here that might help:

> [@SOLVED: Admin page shows FTL offline (and not connection to API), but FTL is running](https://discourse.pi-hole.net/t/solved-admin-page-shows-ftl-offline-and-not-connection-to-api-but-ftl-is-running/4565/10):
>
> Check the output of these commands: which pihole-FTL sudo -u pihole which pihole-FTL

Thanks again all -- keep up great work!

---

<div class="post-metadata">

**Author:** ![mibere](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mibere/32/18057_2.png) [@mibere](https://discourse.pi-hole.net/u/mibere)\
**Post date:** [March 22, 2018, 7:12pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/6 "2018-03-22T19:12:00Z")

</div>

> [@Ocean](#):
>
> The reboot fixed the “admin page not accessible” problem. – thanks!

This was also the solution in another thread. Same problem, same solution.

---

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 22, 2018, 8:26pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/7 "2018-03-22T20:26:34Z")

</div>

Sorry, but I can't seem to fix this.  
Maybe I'm not seeing the connection to the solved thread.

In this case, I cannot get dnsmasq to start. DNS service is not running. And so FTL is not up either.  
I tried a new debug token. But got an error trying to upload the debug log. (w/o DNS)

Here is the local, sanitized debug log:

> **[Pihole Debug Sanitized - Log | PDF | Ip Address | Network Architecture](https://www.scribd.com/document/374632314/Pihole-Debug-Sanitized-log)**
>
> pihole debug log - remove txt

---

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 22, 2018, 8:33pm UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/8 "2018-03-22T20:33:50Z")

</div>

Quick update:

I found and commented out log-queries=extra  
Then restarted. Okay, DNS (dnsmasq) back up and running.

Now: Status: Active. FTL offline

No stats show -- just 'spinning arrows' (but don't timeout).

New debug token: ua2jnhr4bq

---

<div class="post-metadata">

**Author:** ![jacob.salmela](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jacob.salmela/32/8_2.png) [@jacob.salmela](https://discourse.pi-hole.net/u/jacob.salmela)\
**Post date:** [March 23, 2018, 1:40am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/9 "2018-03-23T01:40:13Z")

</div>

> [@Ocean](#):
>
> log-queries=extra

Leave it uncommented but remove `=extra`

```auto
log-queries

```

---

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 23, 2018, 1:54am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/10 "2018-03-23T01:54:41Z")

</div>

Ok. I uncommented, but removed the "=extra"  
Then rebooted.

Problem persists. ☹ Active status, but FTL offline.

---

<div class="post-metadata">

**Author:** ![jacob.salmela](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jacob.salmela/32/8_2.png) [@jacob.salmela](https://discourse.pi-hole.net/u/jacob.salmela)\
**Post date:** [March 23, 2018, 1:55am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/11 "2018-03-23T01:55:43Z")

</div>

Can you send us your entire `pihole-FTL.log`?

```auto
cat /var/log/pihole-FTL.log | pihole tricorder

```

---

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 23, 2018, 1:59am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/12 "2018-03-23T01:59:05Z")

</div>

Interesting... I typed the full command and I get:

> cat: /var/log/pihole-FTL.log: No such file or directory  
> Use netcat.

There is no /var/log/pihole-FTL.log  
There is a pihole.log and pihole.log.1

---

<div class="post-metadata">

**Author:** ![jacob.salmela](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jacob.salmela/32/8_2.png) [@jacob.salmela](https://discourse.pi-hole.net/u/jacob.salmela)\
**Post date:** [March 23, 2018, 2:08am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/13 "2018-03-23T02:08:57Z")

</div>

It looks like your still on `dnsmasq v2.72` and Pi-hole v3.3 so it doesn't seem you followed either of these solutions (from the link @mibere posted):

> [@How do I revert to a previous version of Pi-hole?](https://discourse.pi-hole.net/t/how-do-i-revert-to-a-previous-version-of-pi-hole/7168):
>
> if you want to run a different version of Pi-hole, it is possible to install an older version. Typically, we release all three components of Pi-hole at the same time (Core, Web, and FTL), so you'll usually want to install version from the same "release." For example, we ran into some issues with v3.3 and dnsmasq compatibility with some systems, so some users needed to revert to v3.2.1 (Core and Web) but as part of the 3.2.1 "release," the latest version of FTL was 2.13.2. Because we version e…

> [@Install a more recent dnsmasq on Raspbian Jessie](https://discourse.pi-hole.net/t/install-a-more-recent-dnsmasq-on-raspbian-jessie/7306):
>
> Update: 2018-08-06 As of v4.0, Pi-hole ships with \_FTL\_DNS, our fork of dnsmasq, which should restore compatibility with Raspbian Jessie. We still recommend installing a newer OS as Jessie is EOL anyway. Please note that this tutorial is only meant for Rasbian Jessie, although it might (to some extend) also help with similar issues on other Debian versions. Do this at your own risk (however, the likeliness of a failure is rather small in our opinion). First step: Download more recent versio…

> [@Why can't I run Pi-hole v3.3+ on Raspbian Jessie or with dnsmasq \< v2.72?](https://discourse.pi-hole.net/t/why-cant-i-run-pi-hole-v3-3-on-raspbian-jessie/8052):
>
> Update: 2018-08-06 As of v4.0, Pi-hole ships with \_FTL\_DNS, our fork of dnsmasq, which should restore compatibility with Raspbian Jessie. We still recommend installing a newer OS as Jessie is EOL anyway. By default, Raspbian Jessie only supports dnsmasq v2.72, which does not work with the [log-queries=extra](https://github.com/pi-hole/pi-hole/pull/1859) flag, which is required for Pi-hole v3.3+. You may see error messages such as: dnsmasq: extraneous parameter at line 37 of /etc/dnsmasq.d/01-pihole.conf failed! There are two options…

---

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 23, 2018, 2:35am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/14 "2018-03-23T02:35:59Z")

</div>

Okay - I picked option 2: upgrade dnsmasq to 2.76. Done.

New debug code: 2a51v96m7c

After a reboot, I'm still stuck on "FTL offline" on Admin page.

Above all, thank you for your patience with me, and continued help.

---

<div class="post-metadata">

**Author:** ![jacob.salmela](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jacob.salmela/32/8_2.png) [@jacob.salmela](https://discourse.pi-hole.net/u/jacob.salmela)\
**Post date:** [March 23, 2018, 3:08am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/15 "2018-03-23T03:08:24Z")

</div>

You still have some issue with the install:

```auto
Mar 23 01:51:04 dnsmasq[572]: failed to load names from /etc/pihole/gravity.list: No such file or directory

```

```auto
[✗] pihole-FTL daemon is unknown

```

Try a `pihole -r` \> _Repair_ now that you have the right version of `dnsmasq`

---

<div class="post-metadata">

**Author:** ![Ocean](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ocean/32/3136_2.png) [@Ocean](https://discourse.pi-hole.net/u/Ocean)\
**Post date:** [March 23, 2018, 3:11am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/16 "2018-03-23T03:11:38Z")

</div>

BAM! It worked!! Yea!

THANK YOU!

edit: You rock! 😃

---

<div class="post-metadata">

**Author:** ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)\
**Post date:** [April 13, 2018, 3:11am UTC](https://discourse.pi-hole.net/t/admin-page-returns-403-forbidden-new-install/8178/17 "2018-04-13T03:11:39Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.