Tightening firewall

[texaskilt (David Fox)]

Howdy!

Noob to IPFire, so bear with me.

I am running IPFire on a small development network and I am wanting to close the Firewall a bit. My philosophy is to shut everything down and then open up ports as they are needed.

I created a rule from the Red to Green that drops all protocols. I also created a rule that does the same from Green to Red. I’m thinking that everything should be blocked. However, I can still ping google.com from a client machine on the green network. What am I missing?

Thanks…

[anon42188109]

see this thread

ICMP is enabled by default on red

On a fresh install, the red interface is responding to ping from the public internet. I must be looking in all the wrong places, because I can’t find the option to disable this. Setting the firewall to drop all ICMP to the red interface isn’t doing it either. How do I get red to ignore ICMP requests coming from the internet?

[texaskilt (David Fox)]

Thank you for pointing me in this direction!!!

[bonnietwin (Adolf Belka)]

Hi @texaskilt

Welcome to the IPFire community

@texaskilt

I also created a rule that does the same from Green to Red.

You don’t have to do this. You can change the default mode for Green to Red from Allowed to Blocked.

See this wiki page in the section marked default firewall behaviour for Forward.

https://wiki.ipfire.org/configuration/firewall/default-policy#default-firewall-behaviour