Group by hosts with MAC

Security Firewall Rules
1

Hi all

I was playing with groups…
I created:

  1. a group (in network/host)
    2 some host with ipaddress

and I assigned the host to the group. Then in the source field ,I seleced the group name in Network/Host.
That works…

but…
If I change host, with the device MAC (not IP), the same rule DOES NOT work.

do you know why? Is there any setup I have to change?
thanks
vincenzo

2

This might help:

https://wiki.ipfire.org/configuration/firewall/rules#attention

2 Likes
3

Hi,

if I understood your rule setup correctly, this would mean the same group contains both IP and MAC addresses. I am actually surprised we support configurations like that. :slight_smile:

Do things work well if you create a dedicated group for MAC addresses, clone the firewall rule in question, and set its source to the MAC address group previously created?

Thanks, and best regards,
Peter Müller

4

Hi Peter

each group has been set using or all IP or all MAC. No mix at all.
I re-tested:

  1. I created a new host named IPAD MAC where I included the Mac addr.
    immagine
    immagine943×191 4.53 KB
  2. Then I created a new group named Test and assigned the host in point 1
    immagine
    immagine966×256 5.79 KB
  3. in the end, I’ve changed the rule, including the group Test in source field
    immagine
    immagine928×607 12.1 KB

In IPAD, I put https://192.168.1.115:4443, but then It does not reach the page.
I don’t know where to look for…
Thanks for your support

regards
vincenzo

5

By the way: I’m using
immagine
on RPI 3

ciao
vincenzo