Documentation

documentation@lists.ipfire.org

226 discussions

Need documentation on Orange (DMZ). I'll do the work
by R. W. Rodolico 23 Nov '14

23 Nov '14

Hey all. I do not see the basics of how to set up a DMZ in one single article, and I was thinking about writing it since I'm getting ready to set up my first one (so I'll have screen shots). First, I want to make sure I understand it correctly. I'm using 192.168.20.0/24 as a public IP range (I know it is not, but for this article...) 1. red interface has a block of public IP's assigned, 192.168.20.192/27 2. orange interface has IP of private IP, 172.16.54.1/24 3. for each public IP Assign server to a private IP (172.16.54.x) Create DMZ pinhole from public IP to orange IP Basically, if I'm understanding correctly, setting up the orange interface is similar to setting up port forwarding into the green interface? I'm going to start playing with this, but would prefer to not start out with an incorrect assumption. Also, can anyone tell me WHY we should use orange vs green? It appears to be so well understood by so many people that it is not explained. I'd like the article to be a total newbie document, but later cover things like QOS and stuff. Rod -- "Rod" Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 214.827.2170 http://www.dailydata.net

1 0

Automatic backup of IPFire on an external USB-harddisk
by Daniel Weismüller 13 Nov '14

13 Nov '14

Hi I've overworked these parts of the wiki. Could someone please review it? http://wiki.ipfire.org/en/optimization/usb-harddisk/start http://wiki.ipfire.org/de/optimization/usb-harddisk/start thx Daniel

3 3

Fwd: Re: Automatic backup of IPFire on an external USB-harddisk
by Daniel Weismüller 12 Nov '14

12 Nov '14

Hi Daniel, I have read through both Versions and think they are OK. I have not tried to install and test if it works! The only I thing I did not like is the title. To me it says that a backup of IPfire is done, where it only copies files to the disk. So I would suggest to name the wiki-article something like: "start copying to external USB-drive automaticly" "Automatisch startender Kopiervorgang auf externe USB-Festplatte" although I have no use for it at the moment, I think it is a nice idea. You describe it in simple words, so everybody should know how to do it. Thank You for your work. Best regards, Karl ----- Ursprüngliche Mail ----- > Hi > I've overworked these parts of the wiki. > Could someone please review it? > > http://wiki.ipfire.org/en/optimization/usb-harddisk/start > > http://wiki.ipfire.org/de/optimization/usb-harddisk/start > > thx > Daniel > _______________________________________________ > Documentation mailing list > Documentation(a)lists.ipfire.org > http://lists.ipfire.org/mailman/listinfo/documentation -- Ing. Karl SCHUH Hauptstraße 23a A-7434 Bernstein +43(664)38 06 107 --- Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft. http://www.avast.com

1 1

Modified wiki
by R. W. Rodolico 08 Sep '14

08 Sep '14

Hey, not sure who I'm supposed to notify, but I modified the following page http://wiki.ipfire.org/en/addons/cacti/start I ran into an error with a Cacti install; it did not build the default database. I figure anyone installing Cacti would be comfortable on the command line, so I just added the information on how to do it. Feel free to edit my edits. I'm not married to them, but did want to get the information out while it was fresh on my mind. Rod -- "Rod" Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 214.827.2170 http://www.dailydata.net

1 0

WlanAP config dream plug
by oleg 04 Jun '14

04 Jun '14

Hi , link to dream plug download in wlanAP configuration does not work . Actually explanation in this section doesn't match latest ipfire release . Please advise .

1 0

Should this be included in the wiki?
by R. W. Rodolico 17 Feb '14

17 Feb '14

I ran into a problem with a client running an IPFire firewall, where they had employees using teamviewer.com to access their workstations after hours, effectively bypassing the security of the router. I came up with a solution. Possibly not the best one as it requires building a separate name server, but it at least works. I wrote a "How To" on one of my sites, but if you think it would be useful, let me know where I should put it. http://wiki.linuxservertech.com/index.php?action=artikel&cat=5&id=198 Feel free to tell me there are better ways to do it or there are better uses of the web site. Rod -- R. W. "Rod" Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 http://www.dailydata.net 214.827.2170

3 4

Cryptography
by Michael Tremer 09 Feb '14

09 Feb '14

Hello list, since Snowden, there is a lot going on about cryptography as he said that nothing else will help against mass surveillance than strong cryptography. IPFire provides a lot of services that use (strong) cryptography like the VPN services OpenVPN and strongswan and some others like tor. We can do a lot so that users are able to use these services in the most secure manner, but I think with that comes is still some education about the DOs and DON'Ts needed. So I was thinking that it would be nice to create a section on our wiki about cryptography and to aggregate all information that is important to know at one spot. We can refer to the content from the OpenVPN and IPsec pages for example to suggest which cipher is best to use. I created some pages about hardware random number generators and hardware crypto processors that are commonly used and supported by IPFire. Additionally to that, I can image to add things like these: * Briefly(!) explain the algorithms there are and point out advantages and disadvantages. Of course can never give advice to use exactly this algorithm, but we can say which are considered unsafe to use. * Provide best practices to protect keys, etc. Explain what attacks are possible so that people can prepare for them. I don't want to this to be a huge part of the documentation and this is probably documented somewhere else very well, but I would like to have the basics in our wiki. Detailed explanations should be referenced and not copied. This is all to see over here: http://wiki.ipfire.org/en/cryptography/start Of course I would like to hear your opinions (if there is anybody out there)! -Michael

4 6

Update Accellerator Docs
by Andrew Martin-Hugessen 01 Jan '14

01 Jan '14

Hi, I've recently installed IpFire and am playing around with it's base functionality & plugins, wherever I can see an application or interest to me. I've been tinkering with the Update Accelerator, and had to find the original admin documentation on this (originally ipcop) plugin before I could understand its' config frontend. I'd appreciate the ability to amend the English Wiki to address this, and will probably find other useful places needing updates as time goes forward. I have some experience writing installation & technical documentation for non-technical users, and can do so in an easily understandable & coherent fashion. Looking forward to hearing back from you on this, & wishing you a very happy new year! Andrew Andrew Martin-Hugessen Logictek Information Services T: 514.585.0359 E: <mailto:andrew@logictek.ca> andrew(a)logictek.ca

1 0

Reset IPFire configuration without new installation. Is that possible?
by Dirk Lehmann 20 Dec '13

20 Dec '13

Hello, I was wondering if anybody could tell me if it is possible to reset the IPFire configuration to default without a new installation? Best regards, Dirk Lehmann

2 1

New Firewall GUI documentation
by Michael Tremer 10 Sep '13

10 Sep '13

Hello, so, since we have finished the documentation for Tor, the DNS forwarding GUI and the wireless client GUI, we can now move on to something new, which is documenting the new firewall GUI. So, basically everything that exists about the current firewall can be throws away, because the GUI has entirely been rewritten. I already started a new section on the wiki with a little bit of a structure, I imagine works well: http://wiki.ipfire.org/en/configuration/firewall/start This is a huge project and I guess that we won't finish this in a week as the workflow dictates, but at least we should try to finish as fast as possible. In order to make this easier, I would like to split the section into some smaller parts: * Introduction This should cover what is so distinct about the IPFire firewall. I think there is a lot to mention and I started a little list of features that should be mentioned. Generally, this section should contain advice that you should never open more ports than you need and so on... * Creating rules Because explaining this on one big page won't work, I recommend splitting this into two parts: a) a reference which explains the "rule creation" page on the web user interface in detail and b) very tiny step-by-step guides which cover topics like "setting up a port-forwarding". Doing it this way, you won't need to read the entire reference if you only want to create a port-forwarding. If you need some more information, you will find everything in the reference. We could also add some step-by-step guides for those people who know about DMZ pinholes and stuff, to make the transition easier for them. Opinions? * Migration guide There should be a migration guide, that explains what happens when the update is installed and covers any possible trouble that may come with that. * Other things... There is the P2P block feature, that should be documented somewhere. It would also be nice to mention the firewall.local file, which is not that important any more, because the new GUI is capable of so much more things, that you won't need to create your own rules any more. Maybe some people do, so we should document that as well. ---- These are lot of things, that need to be documented. I hope that a lot of you take part in in this project. If you need some input about what to write, there is already some documentation in the deprecated "nonpublic" part of the wiki: http://wiki.ipfire.org/nonpublic/en/configuration/firewall/start Don't copy from that, because that documentation is considered as developer documentation and is not very handy for end-users. So, please go ahead and start writing. If you are not sure what to write, discuss these topics first on this mailing list. Make sure that everything is in easy terms, so that end-users actually get help from these documents. Please don't do screenshots, yet, because the GUI may still change a bit. We don't plan on changing anything major, but bugs and other inconsistencies may need some minor changes on the look & feel. Happy writing, -Michael

2 1

← Newer
1
...
5
6
7
8
9
10
11
...
23
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

Documentation