Not able to access the web UI after the initial install

Hi,

I want to build a lab to evaluate ipFire. So I created a VirtualBox VM with 4GB RAM, 8GB storage, and 2x bridged NICs and installed v. 2.29 on it.

To the GREEN NIC I assigned IP 10.0.0.44

To the RED NIC I assigned IP 10.0.0.55

Now, I can ping both addresses from anywhere on my LAN, but when I put either address and the port 444 in the browser, it times out.

Just to test a theory that it might be a local firewall, I temporarily assigned either address to another machine, and I can open them in the same browser, so this path is clear.

How should I troubleshoot this?

The only thing that seems odd is that during the boot time it sits at “Reloading firewall…” for a long time, like 1 minute.

If you have green0 set to 10.0.0.44/8 and red0 set to 10.0.0.55/8 then both of your nics are on the same subnet.

Hello,

hmm, it seems that you have a subnet conflict. The subnet of the RED interface has to be a different one than the GREEN interface. Quite likely, both a part of the 10.0.0.0/24 subnet. If so, the firewall would not know which interface to use because there are multiple options.

Log in on the console, run “setup” and change the IP address of either of the subnets, reboot and you should be able to get in.

Okay, I changed them from 10.0.0.44/8 and 10.0.0.55/8 to 10.0.0.44/8 and 192.168.0.44/24 and rebooted. No dice. Neither pings anymore. I can ping the host from the guest, but not the other way around.

Wiped and rebuilt the VM from scratch with the above addresses, and it again can be pinged but still no web UI. By using wget, I can see that it is running on the guest.

I’m thinking that you still have a subnet issue. Have you multihomed the host IP so that it’s on the same subnet as the guest?

My lan is 10.0.0.0/8, so the GREEN is on the same subnet.

For this test did you get a response from the guest when hitting it with wget? What response did you get?

Maybe I should stop the firewall on the guest? Could it be blocking the inbound HTTPS?

I’m confused by the output that you posted. Are you doing a wget from ipfire to the ipfire:444 port? The output posted indicates that you connected but didn’t allow the self signed certificate that ipfire uses.

And I don’t recognize the 10.10.1.55 address. Did you change your ip configuration from what you posted earlier?

Yes, locally on the ipfire VM, wget can reach the web server. Externally, from the host or any other LAN device for that matter the connection times out.

You should not be able to recognize any IP addresses that I use. I am the IT manager for my organization, and I am free to use any LAN IP addresses as I see fit, so I change them whenever I want. If one does not work, I use another.

I get that, but trying to help you troubleshoot with you changing things makes it hard for me to understand what you’re doing and what the problem may be. I think that you need to look at your VM configuration and make sure that you have bridging properly configured. If that’s set up correctly you should be able to ping your VM guest from the host and vice versa.

This was never a problem with other router OSs on any of my labs.

How can I stop the firewall on the ipfire guest VM just to check whether it is messing things up?

I can, like I wrote. Only the HTTPS is not working.

So, locally, the HTTP server is responding, even though not very welcoming. Externally, it times out. The only firewall that may be messing things up is the ipfire VMs firewall. Can it be stopped at least temporarily?

What response do you get when you try to wget the ipfire:444 IP from the host?

Like I wrote, it is a timeout.

ssh also says ‘connection refused’. It’s the firewall, I swear.

Can you post a wget response from a host outside of the ipfire vm? All you have sent is wgets from the ipfire vm to itself.

I won’t bother. This has become silly.

From the wgets internal ipfire to ipfire:444, IPFire is working properly. I’m sorry that I could not help more.

edit

By default, SSH access is disabled.


The guide below should be helpful

Perhaps this is the answer you are waiting for?