MAC Access Control List for Admin login and for green network
I know that can be realized by firewall rules and port … I’m experimenting with that at next days.
It is just an thinking if anyone had same idea and work at an solution.
-
For an more secure administration admitted access. Adding a enable option to an MAC list for who is allowed, to access IPFire UI or UI port by green and blue, from local network or over VPN network.
Distant suspicion, it is a way to harden access, not nearly of the idea of 2FA … but once by an right MAC that match the list and the other by PWD.
Anyway maybe in future, the web interface will allow an two level password authentication, or an two password login, or sending mail with an code access. -
For eth green as it is at eth blue under (Firewall / Blue Access “Devices on BLUE”) there we can give access for devices MAC address.
I recognized my foxy child using eth green network secretly over an cable, after blue use time window was expired at 22:00h.
Now the MACs are in the time list for green too. But!
The other matter I found is the auto MAC address generator there the device own … Therefore it make sense to have an MAC allow list for green access too.
BR
Trash