By default, IPFire controls the access of all devices on blue using MAC Address filtering. This means that all DHCP leases must be manually approved in the IPFire Web User Interface before they can access the network and gain internet access. This filtering is separate to any wireless passphrase which you have applied in IPFire or to an external a WiFi access point.
Unless disabled, MAC Address filtering is applied to any device connected to the blue interface.
This includes external WiFi access points which may also apply MAC address filtering by default.
Example (without DHCP on blue): 00:13:02:XX:XX:XX is the WLAN-clients MAC address and the client should use the IP 192.168.49.1.
To disable MAC address filtering and allow all clients connected to blue internet access do the following on the Wireless Configuration page:
Disabling MAC address filtering does not disable WLAN encryption
If no blue network clients should have access to the web interface, add the following entry to “/etc/sysconfig/firewall.local”
## Start rule iptables -A CUSTOMINPUT -s 192.168.49.0/24 -p tcp -d 192.168.49.254 --dport 444 -j DROP ## Stop rule iptables -D CUSTOMINPUT -s 192.168.49.0/24 -p tcp -d 192.168.49.254 --dport 444 -j DROP
By default, the firewall will not allow traffic from the Blue network to pass through to the Green network. If you wish to allow traffic to pass through from the Blue network to the Green network, you must create a firewall rule to allow that traffic.