DELETE-command drop

Security Firewall Rules
1

Hi Folks, I have an immich-instance (https://immich.app/) in orange-zone. Nginx as reverse proxy is running at ipfire and works fine for some webserver on different machines at orange. Everything is going well, but when I issue a “DELETE” command in the immich web UI, it doesn’t arrive on the immich instance. If I access the immich instance from another computer in the orange network, then the DELETE command also works.

The developers of immich suspect that the firewall drops the “DELETE" command.

Question: Can that be? If so, where should I look to adjust the behavior?

Thank you for any help!

Vossi

1 Like
2

I think that you’re saying orange-client to orange-server works but red-client to orange-server doesn’t work. Check your log on ipfire and see if there is a DROP for red-client to help figure out why.

1 Like
3

The firewall cannot drop a special http(s) request. It accept or deny the whole connection.

The reverse proxy or the IPS may do this. (check such logs)

1 Like
4

Thank you guys!

@Arne: That is a clear answer!

5

I got it!
The Suricate rule GPL WEBSERVER DELETE was to blame. I deactivated this, now the website works.

Thanks for your help!