wiki.ipfire.org

The community-maintained documentation platform of IPFire

User Tools

Site Tools


en:configuration:start

The Web Interface

The web interface is a graphical frontend for configuring IPFire. It can be easily accessed with a web browser, and after a successful login it allows access to the most important features of IPFire.

By default the web interface is at the following URL.

https://ipfire.localdomain:444

The interface is also accessible via IPFire's IP.

https://192.168.1.1:444

The 192.168.1.1 is in this example the internal IP address (Green) of your IPFire and 444 is the port. Your configuration may have a different IP, but the port is probably still 444.

Note: Your web browser may display a “Self-Signed Security Certificate” warning when attempting to open the web interface. You must accept this certificate in order to be able to connect!

A window should appear asking for a username and password. For username type in “admin” and the password is what was entered during the installation process for the admin account.


Note: As a general rule keep in mind:

  • IPFire assumes, that it is configured via WUI
  • The WUI holds the config data in files named settings
  • save/restart buttons build the corresponding .conf files from scratch
  • manual additions are possible in .conf.local files, which usually are included in the .conf file

To keep the configuration as clear as possible, the menu is subdivided into various areas of configuration.

System

IPFire's main settings.

Start Page The Start Page offers an overview of all network connections.
Dial Up Only active if a dial up connection is used.
Wireless client Only active if a wlan card is configured for the red network.
SSH Access The SSH Access section offers the option to activate a SSH server to configure the system via remote shell.
Backup The Backup section offers various options to save the configuration of your IPFire installation. There are options to back up the entire system to an IPFire settings file (*.ipf) or create an installable ISO. There are also options to backup the configuration of addons, such as Samba.
User Interface Inside the User Interface section you can change the look and feel of the web interface.
System information These pages provide information about the system, such as the release and installed hardware (fireinfo).
Credits Finally, the Credits list the contributors to the IPFire project (Developers, Support and Testers).

Status

In this section graphs and status reports on many parts of the system can be found.

System Cpu load and usage graphs
Memory Memory and swap usage
Services Shows current services status and process memory usage.
Media Temperature, HDD and media status including S.M.A.R.T.
Network (external) Traffic and configurations for EXTERNAL network
Network (internal) Traffic and configuration info for INTERNAL network
Network (other) Gateway and firewall statistics
OpenVPN Clients OpenVPN Client statistics statistics
Hardware Graphs Onboard and HDD temperature sensor statistics
Connections IP open connections table.
Net-Traffic Detailed IP traffic stats

Network

Here, all settings for the network are located. This section offers options to configure the Advanced Proxy and other tools with an easy to use graphical user interface.

Web Proxy Server The Advanced Proxy Server can be configured here. There are several plugins for the proxy, such as the URL Filter and Update Accelerator
DHCP Server Automatically assign IP addresses for new internal Clients (Required for most installations)
The Connection Scheduler is able to disconnect and reconnect the red connection at given times or change the connection profile itself.
Edit Hosts Assign names to Clients so you can access them by name, instead of only using an IP address (internal DNS)
Static routes Configure access to network routed subnets. Connect to orange or blue interface.
Aliases You can add your public IP addresses of your IPFire here.
DNS Server Set the DNS server for your red interface, useful if your red0 interface doesn't use DHCP.
DNS forwarding Forward requests for certain domains to a specified domain name server.
Assign MAC Address Change the MAC address on red0. Useful for cable modems and other equipment that binds to a specific MAC address.
Wake On LAN Power up computers which are configured for Wake on LAN.
Bridge-Green-Blue Combine green and blue to form one logical network

Services

IPSec Developed to make general TCP/IP more secure.
OpenVPN In here, the configuration of roadwarrior and network-to-network connection are explained, furthermore, there are quite a few enhancements and information on the topic of OpenVPN.
Dynamic DNS Used to reach a dynamic IP address using a DynDNS name.
The Time Server Synchronize IPFire to an external time source, then serve time to LAN clients via NTP.
Quality of Service Grant specified bandwidth for specific services, like VoIP or game traffic.
Intrusion Detection System Analyze network traffic, looking for potential intrusions.
ExtraHD Quickly and easily mount additional internal and external hard drives.

Firewall


As of IPFire 2.15, the firewall interface has been significantly upgraded and improved. All users of IPFire 2.15 or greater should use the link below:


Warning:The firewall interface was completely rewritten for IPFire v2.15. If you are using v.2.15, use the link above. The links below are for older versions of IPFire.

For users of IPFire 2.13 and earlier versions, these are the configuration guides:

Port-Forwarding How to forward traffic from the Internet to an internal server.
External Access External access to the IPFire system itself.
Access to Blue The access to the Internet over WLAN can be granted at Access to Blue.
DMZ-Pinholes. DMZ pinholes allow access from the orange or blue Network to the green network.
Outgoing Firewall Specify what traffic is permitted to access the Internet.
Firewall Groups Create groups of devices by IP or MAC address. Rules can then be applied to the group as a whole.
Firewall-Options More settings for the firewall configuration can be found in Firewall-Options.
IP-Tables iptables are the tables provided by the Linux kernel firewall (implemented as different Netfilter modules) and the chains and rules it stores. Different kernel modules and programs are currently used for different protocols.

IPFire

At the beginning of the section “IPFire” you can find the menupoint Pakfire in your sidebar. In the left column, all available Addons can be found. Already installed addons are located in the right column. The addons Samba, Tripwire and Mpfire have an own Webgui to configure and control them in the sidebar.

Logs

Here you can find a graphical or textbased overview of the logfiles:

Translations of this page?:
en/configuration/start.txt · Last modified: 2014/10/04 01:48 by trymes