[Freedombox-discuss] connection/firewall problem with privoxy

[James Valleroy]

On 02/27/2017 10:47 AM, Aaron Ferrucci wrote:
> Oh, that's weird - I had openvpn running at one point, but I had
> disabled it. Or so I thought: I looked at the plinth openvpn page, and
> saw that although the checkbox ("Enable OpenVPN server") was not
> ticked, the page said, "OpenVPN server is running". Somehow it got
> into an inconsistent state. I enabled, then disabled it, and now
> things looked right on that page.
> 
> With OpenVPN not running, I see:
> 
>   [freedombox]$ nmcli connection
>   NAME                   UUID                                  TYPE
>         DEVICE
>   FreedomBox WAN         599a2458-cd6d-463a-929a-8f15cadd4260
> 802-3-ethernet  enp1s0
>   FreedomBox LAN enp2s0  ede86fda-5b2b-4538-bd09-efbc89e73576
> 802-3-ethernet  --
>   FreedomBox LAN enp3s0  d765a2a2-77e2-4a16-a894-8f6d7ce3acb0
> 802-3-ethernet  --
>   tun0                   704fd1e0-d860-47d0-b834-0fb28cc7c4b9  tun
>         --
> 
> ... and:
> 
>   [freedombox]$ nmcli connection show "FreedomBox WAN" | grep zone
>   connection.zone:                        external
> 
> I'm not sure how to proceed now. Should I assign the "FreedomBox WAN"
> connection to zone "internal"? Or create a new connection, and assign
> that one to internal? Thanks for the help!

If your FreedomBox is behind a router (i.e. not publicly accessible from
the Internet), then yes, typically you will want the "FreedomBox WAN"
connection to be in the internal zone.

Currently the default configuration is like this:
- If there is only one network interface, then it is internal.
- If there is more than one interface, the first one is external, and
the others are internal.

Basically in the first case we assume the FreedomBox is behind a router,
and in the second case we assume the FreedomBox is replacing a router.

--
James

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 866 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20170228/f21d1848/attachment.sig>