# Internet access for ORANGE

**URL:** <https://community.ipfire.org/t/internet-access-for-orange/2709>\
**Category:** Installing & Running IPFire\
**Created:** [8 July 2020 15:01 UTC](https://community.ipfire.org/t/internet-access-for-orange/2709 "2020-07-08T15:01:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![fwtijqqntp](https://community.ipfire.org/user_avatar/community.ipfire.org/fwtijqqntp/32/240_2.png) [@fwtijqqntp](https://community.ipfire.org/u/fwtijqqntp)\
**Post date:** [8 July 2020 15:01 UTC](https://community.ipfire.org/t/internet-access-for-orange/2709/1 "2020-07-08T15:01:19Z")

</div>

Hello,

I’ve setup a DMZ network.

Please take a look at the table under the firewall rules:

 ![Bildschirmfoto von 2020-07-08 16-58-35](https://community.ipfire.org/uploads/default/original/2X/9/971ce1c5f9f5b02a1cf82026647d595c44e45e83.png)

It clearly shows that ORANGE is ALLOWED to access the internet.  
However, this doesn’t work. I can’t ping any server in the internet.

It works after I created the rule manually.

Is this a visual bug, or have I done something wrong?

---

<div class="post-metadata">

**Author:** ![hvacguy](https://community.ipfire.org/user_avatar/community.ipfire.org/hvacguy/32/8576_2.png) [@hvacguy](https://community.ipfire.org/u/hvacguy)\
**Post date:** [8 July 2020 20:55 UTC](https://community.ipfire.org/t/internet-access-for-orange/2709/2 "2020-07-08T20:55:32Z")

</div>

Note Default policy  
[https://wiki.ipfire.org/configuration/firewall/default-policy](https://wiki.ipfire.org/configuration/firewall/default-policy)  
Your DMZ has no DNS server !  
You can give it a DNS like 1.1.1.1 or 8.8.8.8 or you must have a firewall rule to allow Ipfire DNS

---

<div class="post-metadata">

**Author:** ![fwtijqqntp](https://community.ipfire.org/user_avatar/community.ipfire.org/fwtijqqntp/32/240_2.png) [@fwtijqqntp](https://community.ipfire.org/u/fwtijqqntp)\
**Post date:** [9 July 2020 05:31 UTC](https://community.ipfire.org/t/internet-access-for-orange/2709/3 "2020-07-09T05:31:24Z")

</div>

Ahhh thank you for the hint.  
Okay that explains a lot. 😃

I’ve set the IPFire’s IP as DNS server on the device inside the DMZ.

But if the IPFire DNS is forbidden by default, why does it work with above rule?  
It still shouldn’t have DNS with this rule.

Since DNS from IPFire is forbidden by default, is it a bad idea to allow it for devices inside the DMZ?

---

<div class="post-metadata">

**Author:** ![hvacguy](https://community.ipfire.org/user_avatar/community.ipfire.org/hvacguy/32/8576_2.png) [@hvacguy](https://community.ipfire.org/u/hvacguy)\
**Post date:** [9 July 2020 10:34 UTC](https://community.ipfire.org/t/internet-access-for-orange/2709/4 "2020-07-09T10:34:55Z")

</div>

Not shure. But DNS is not blocked every where on Orange just to the firewall it’s self.  
So when your server in orange asks for DNS it gets no response.  
So it can’t resolve any DNS requests.