But now have no access on green to the internet and all machines on the green interface, also no access to orange and blue. same from orange to green and orange to blue.
When connected from outside with OpenVPN i can access to machines on green, orange and blue.
Hmm, only made a backup from the old server and restored it to the new one written above.
Compared during the weekend all settings and rules old server/new server and pressend on each page/option ok/save/update. Now access green itself, green to blue and green to orange is working, access from green to red (internet) isn’t working.
Access from green to red (internet) is only working with setting up a rule from green to red. Something is going wrong with the web-proxy here but i didn’t know what can i do here.
If you think the problem is related to the proxy server then if you disable the proxy server you should be able to access the internet again.
If that doesn’t allow green to access red what do you get if you try
ping -c4 ipfire.org
from the console. What result and message do you get?
If you can’t get a response back from ping then are you connected to your ISP.
Some ISP’s fix the mac address that is used for the first time and when you change the hardware they will not connect as the mac is different. If this is the case you will need to get your isp to reset the mac address they have stored for you or you can change the mac address presented by IPFire on red0 using menu Network - Assign MAC-Address to enter the mac address you used to have with your old hardware.
You can check if red0 is connected on the main WUI page. Does IPFire show it is connected and do you have an IP address showing for ther Internet connection and for the Gateway. If those entries are present and IPFire shows Connected under status with the connection time then you are connected to your ISP.
4 bytes from fw01.ipfire.org (81.3.27.38) icmp_swq1 ttl=55 time 18.8 ms
4 bytes from fw01.ipfire.org (81.3.27.38) icmp_swq2 ttl=55 time 18.9 ms
4 bytes from fw01.ipfire.org (81.3.27.38) icmp_swq3 ttl=55 time 18.9 ms
4 bytes from fw01.ipfire.org (81.3.27.38) icmp_swq4 ttl=55 time 18.7 ms
I‘m confused:
With an simple rule (green to red, allow all) i have internet on the green interface. in that case it makes no difference if proxy is enabled or disabled.
Ping to ipfire.org and 81.3.27.38 from a machine in the green lan works. Both results looked the ping-test before.
The firewall.local inside:
#!/bin/sh
# Used for private firewall rules
# See how we were called.
case "$1" in
start)
## add your 'start' rules here
;;
stop)
## add your 'stop' rules here
;;
reload)
$0 stop
$0 start
## add your 'reload' rules here
;;
*)
echo "Usage: $0 {start|stop|reload}"
;;
esac
Unfortunately I have just about reached the end of my knowledge for this then. Hopefully there are other people who have more experience/knowledge who can suggest things to check for.