Iphone11 got in the inside network

Security
1

The setup:
Virtualbox on win10 home
Ipfire installed on virtualbox
Inside is 192.168.100.0/24 - host-only w/IPFIRE DHCP
Outside is 192.168.1.0/24 - bridged to wifi w/static ip

The issue:
My wife bought an iphone11pro and connected it to home wifi, outside the ipfire firewall. At the same time I was(by chance) looking at the ipfire DHCP server and it listed a machine with hostname iphone_***** with ip address and mac listed, immediately I asked my wife to check the mac address of the phone and it matched exactly to the one on ipfire inside network.

Note:
Only configured network, default gw, dns

Question:
How did the iphone get on the inside network, this makes no sense at all.

Possibilities:

  1. There’s a flaw in ipfire security configuration
  2. Iphone managed to breach ipfire security

Annexing pics from ipfire and iphone

IMG-20191229-WA0002
IMG-20191229-WA00021920×1920 392 KB

Note: pic doesn’t show hostname, but it was there, nevertheless the mac proves it.

2

I don’t think that is an ipfire problem. DHCP server from green never send any leases into red network. I would say check your virtual box configuration.

3

Unlikely, bridge and host-only have no possible connection between them beside the ipfire, and the network configuration of VBox is pretty straight forward. Right now I’m also considering win10 because it’s the only other available path between both networks.

4

Have you configured blue?
If 192.168.100.11 is a green address and kibana is your WIN10 computer attached to the LAN, then I would suppose your virtual machine as leak, also.

5

No blue interface. Kibana is virtualized on VBox and has only one interface which is connected to host-only. Yes I’m also considering win10