»Incoming Firewall Access« blocked or open?

Security Firewall Rules
#1

Hello IPFire community,

I have a problem understanding the Incoming Firewall Access.
I wanted a setup as described in this article »Force clients to use IPFire’s DNS proxy«.

This has led me to the understanding that actually any traffic targeted into IPfire FW directly is blocked by default unless explicitly allowed.

screenshot44
screenshot44960×147 10.1 KB

Now I am also running Samba Cups and the NTP server on the FW, and all of it is accessible just like that.
Did I get this wrong?
Or is the FW misbehaving?

Thanks a lot,
regards

Matthias

My IPFire

#2

Hi, on green source and destination green, your network is blocked. To default all incoming connection are blocked. If you allow a network client to automatic DHCP, all client receive the DNS specify in DHCP configuration.

#3

Hi Walter,

thanks a lot for you response :slight_smile:

To default all incoming connection are blocked.

That would mean it’s an error :thinking:

If you allow a network client to automatic DHCP, all client receive the DNS specify in DHCP configuration.

That should not work than as well…
and the Webserver on it too :thinking:

That cannot be, because I don’t see a possibility to un/block incoming, only Forward and Outgoing:

screenshot45
screenshot45915×415 35.9 KB

Any other hint?
Or an explanatory wiki article?

Regards
Matthias