Hi everyone,
I’ve just installed IPFire and noticed that SSH or WebGUI ports are open to external world.
I thought that I can easily fix that by adding Firewall Rules - but after few experiments I need to say that I don’t know how to do this
I just wonder what I’m doing wrong?
My configuration is visible on attached screenshot
This is not correct. All ports are closed if your connection comes in via RED because of NAT.
I assume you try to access your WebGUI via the RED IP but your connection comes in via green. (The real source of the connection is important not the ip that you try to connect, If the connection terminate on the same machine it never reach the red interface even if you try to connect the red ip from green) In this case the port is open and you cannot block port 444 for green via the gui (to prevent lock yourself out)