IPFire allows web GUI from GREEN by design, and only VLAN segmentation setting can fully restrict it.?
GREEN is the trusted local wired network. Therefore the WUI is accessible from it.
Restriction works by authentification. The admin is responsible, as always, to choose a strong password and hide it to unauthorized users.
1 Like
Yes.
No.
You can also create firewall rules that block all green access to the WUI and then allow access to a specific IP on green.
However, be careful to not get anything wrong otherwise you could end up blocking everything from accessing the WUI and you would have to start editing WUI files directly via the console or do a fresh install to start again.
If you want to ensure good security for access to the WUI follow the practices described here.
Then if you are worried about other users on your green lan trying to break in to the WUI install the Guardian addon
5 Likes