I am in a situation where I require WAN access to be opened up to the WebConfigurator through pfSense because I do not have another node connected to the same network to access WebConfigurator from the inside. Ideally I would like to just do this in shell and either directly modify pf's config to "allow all" just long enough for me to open up WAN access to WebConfigurator from my IP, or modify config.xml to add that rule manually. Does anybody have any insight into how to accomplish this?
Try this on the shell to disable PF temporarily:
Then once you are able to login and create the rules turn PF back on with:
I've had to do exactly what you describe before when I locked myself out remotely.
If you are using a pfSense installation, use the tools pfSense offers to make changes.
A better solution in your case might be to set up a VPN connection and put yourself on the inside network that way rather than punching holes in your firewall. It's more secure, particularly in that you're not relying on time as a defense ("The hole is only open for a few minutes" only works if nobody falls in during that time) and there's no chance of forgetting to close the firewall back up when you're done.