An access problem

General questions.
User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

An access problem

Post by domsheldon1 » March 9th, 2017, 10:36 am

Hello,

I'm sorry for my English.

I have an IpFire at IP address 192.168.2.1 (IPFire 2.19 (i586) - Core Update 109)
I have a server pc at the IP address 192.168.2.103 (Server name: LONDRES)
I have a Synology NAS at IP 192.168.2.200

I have a rule in firewall for internet shutdown from 22:00 to 06:00.
Rule: Any - Any - REJECT - Time (daily) from 10pm to 6am.

As of 22:00, pcs have no internet and it works. Perfect.

From 10 pm:

- Access to the NAS is ok
- Access to the server is not possible for the following applications:
192.168.2.103:8089 and 192.168.2.103:4900

This is problem for user management!

A PING on the IP address 192.168.2.103 is OK
A PING on the server name LONDON is denied.

These are the rules in Ipfire. Can you help me ? I hope I am good at the explanations!
Last edited by domsheldon1 on March 9th, 2017, 10:40 am, edited 1 time in total.

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 9th, 2017, 10:37 am

Copy screen:
Attachments
004.JPG

User avatar
neopegasus
Posts: 26
Joined: July 12th, 2016, 11:15 pm

Re: An access problem

Post by neopegasus » March 9th, 2017, 2:07 pm

Hey Domsheldon1,

What if you change the rule you make like this; change the destination any to red and check if your blocking Internet still work and have access to the server.

Best Regards

Neopegasus
Image

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 9th, 2017, 2:12 pm

Thank you neopegasus.

I already try this:
Green to red.
> Internet connection is not blocked.

I tell you if it works any to red.

User avatar
neopegasus
Posts: 26
Joined: July 12th, 2016, 11:15 pm

Re: An access problem

Post by neopegasus » March 9th, 2017, 2:20 pm

Your welcome , if you can you can use web-proxing to filter connection to so you do not need to play with firewall rules.
Is just a other idea you can try.

best regards

neopegasus
Image

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 9th, 2017, 2:35 pm

Thank you for your ideas.

Is it this ? http://wiki.ipfire.org/en/configuration ... nf/limit_t

Best regards,

User avatar
neopegasus
Posts: 26
Joined: July 12th, 2016, 11:15 pm

Re: An access problem

Post by neopegasus » March 9th, 2017, 2:52 pm

yes that , it is set for every day access, but you can change it and try it out.

Best regards

Neopegasus
Image

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 9th, 2017, 11:15 pm

Access is denied for this link: http://192.168.2.103:8089

User avatar
neopegasus
Posts: 26
Joined: July 12th, 2016, 11:15 pm

Re: An access problem

Post by neopegasus » March 10th, 2017, 11:39 am

I think because that port is in the range of Internet browsing port that it get automatically blocked, try to make the server with the port 8089 in a unblock list and try again.
Attachments
screenshot6.png
Image

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 15th, 2017, 7:54 pm

Hi,
I have a solution.
This works perfectly! What do you think of this solution?

Merci
Attachments
Z01.PNG

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 15th, 2017, 7:56 pm

Attach 2
Attachments
Z02.PNG

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 19th, 2017, 10:11 am

Hello, Do you have an opinion on my solution?
Is there a user manual (WIKI) on time management with IpFire? This seems very complicated!
There is little information in my opinion.

User avatar
neopegasus
Posts: 26
Joined: July 12th, 2016, 11:15 pm

Re: An access problem

Post by neopegasus » March 20th, 2017, 7:14 pm

Ok sorry for being late,
your solution seems to aloud every thing that come in, I tout you want to block Internet for some time but not assept all?

Bout the wiki check if this help you:
http://wiki.ipfire.org/en/configuration ... nf/limit_t
again this work with the web proxy.

I hope this may help you
Best regards

Neopegasus
Image

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 21st, 2017, 1:16 pm

Hello,
Thank you for your answers and your follow up on this forum.
Thank you for the link, this option is interesting.
Tests are required. I would come back with the results.
Have a good day,

User avatar
domsheldon1
Posts: 177
Joined: October 11th, 2011, 9:44 am
Location: Mons - Belgium

Re: An access problem

Post by domsheldon1 » March 21st, 2017, 1:21 pm

My solution opens the internet from 06:00 to 22:00.
The rest of the time, internet is blocked but access is allowed for our applications.
For example:
The staff timer: http://192.168.1.103:8089
Etc ...

Post Reply

Who is online

Users browsing this forum: Yahoo [Bot] and 3 guests