How to Install ‘IPFire’ Free Firewall Linux Distribution

Step 2: IPFire Network Configuration Settings

17. Here, we are using 2 Ethernet cards in our system. Each Ethernet card needs to be assigned separately for each network, by default it will choose GREEN + RED that means It connects to the local area network and WAN connection with Internet access.

IPFire Network Configuration

IPFire Network Configuration

18. Next, select GREEN + RED color for our two network cards and choose Ok to continue.

Select IPFire Network Type

Select IPFire Network Type

Now we can see the current config as GREEN + RED it’s with local, WAN.

Step 3: IPFire Drivers and Card Assignments

19. From here, choose Drivers and card assignments type to choose the Network, which is going to assign for LAN and WAN interfaces.

Select Drivers and Cards

Select Drivers and Cards

20. Next, choose GREEN and press Select to enable a Interface for all two network cards.

Select Network Interface

Select Network Interface

Enable Network Interface

Enable Network Interface

21. Repeat same above steps for RED interfaces and at final step we can see as below.

Assign Red Network Interface

Assign Red Network Interface

Step 5: Assign IP Addresses for Network Interfaces

22. Now time to assign IP address for each interfaces. Here we have only 2 interfaces and we need to assign IP address in different sub-net.

If we using for RED interface, we must use different IP and network for other interface. For RED interface we going to use DHCP.

Select Address Settings

Select Address Settings

  1. GREEN interface –
  2. RED interface – DHCP

23. Choose GREEN and provide the IP, While choosing we will get a Warning that our Local area connection will be dropped if we change the IP.

Select Green Interface

Select Green Interface

IP Change Warning

IP Change Warning

24. Next, provide the IP for GREEN network interface for our Local/Internal network.

Set IP Address For Green

Set IP Address For Green

25. Choose RED interface and choose DHCP to get a IP from our ISP are we can assign a manual IP. This is our WAN interface which expose to the Internet.

Set DHCP IP Address

Set DHCP IP Address

26. Here we need to configure whether our internet connection with a Static IP or PPPOE or DIALUP method. I’m using DHCP for WAN interface. Choose Ok and save it by choosing DONE.

Configure Internet Connection

Configure Internet Connection

If You Appreciate What We Do Here On TecMint, You Should Consider:

TecMint is the fastest growing and most trusted community site for any kind of Linux Articles, Guides and Books on the web. Millions of people visit TecMint! to search or browse the thousands of published articles available FREELY to all.

If you like what you are reading, please consider buying us a coffee ( or 2 ) as a token of appreciation.

Support Us

We are thankful for your never ending support.

Babin Lonston

I'm Working as a System Administrator for last 10 year's with 4 years experience with Linux Distributions, fall in love with text based operating systems.

Your name can also be listed here. Got a tip? Submit it here to become an TecMint author.

RedHat RHCE and RHCSA Certification Book
Linux Foundation LFCS and LFCE Certification Preparation Guide
The Complete Linux System Administrator Bundle
Become an Ethical Hacker Bonus Bundle

You may also like...

16 Responses

  1. Than Vu Van says:

    Hi, I am learning about IPFire. Can you tell me about the structure of IPFire? Thank you

  2. Garron says:

    I need some help immediately please, I am trying to setup ipfire in my virtual environment and got to the stage where set-password is required but my keyboard won’t input anything in the field. Is there any special key to use for typing in there?

  3. Johan says:

    Thank you so much!!!!!!

  4. Francis says:

    Nice writeup.

    I’ve been using ipfire as my production firewall appliance for about 5 years. It is very simple yet very powerful.

    I moved to ipfire from ipcop years ago because of the active development and modern kernel. Ipcop was secure and functional but was just kind of stagnating on innovation and moving forward to operate on today’s hardware.

    I’m surprised I don’t see more about ipfire in any the tech sites I visit.

    Thanks for promoting this great tool!

  5. Jadson says:

    I can’t access the web interface after installation.
    I ping the green interface from my notebook and then ping my notebook from the virtualbox with the ipfire and it’s all right.

    My network range is ~
    IPFire range is ~

    I’ve tried access at: it loads for minutes, then it stops.

  6. jeran maglanque says:

    Sir can i know how to add another system administrator in ipfire to avoid in login to root password?

  7. RK SINGH says:

    My Red IP is and Green IP is
    IPFIRE is running on NAT.
    In above condition IP address is not working in Green LAN.
    I want to disable the NAT and enable the routing.
    What are the procedure for disable the NAT and enable the routing between green to red.

  8. Deepanjan says:

    yes i have used the port no. i.e. 444 isn’t ?? but didn’t get any web console

  9. Babin says:

    You have two Ethernet cards ? Everything okay, Have you used the port number to access the Web UI ?

  10. Deepanjan says:

    Hi Babin,

    i am unable to get the web interface i have chosen GREEN+RED

    my current network design is

    Internet (ISP)–> Modem–> Ipfire
    Red= wan= via dhcp from internet modem/router
    Green=lan= static lan

    please help to get the web interface

    • Babin says:

      @Deepanjan You have two Ethernet cards ? Everything okay, Have you used the port number to access the Web UI ?

      • Deepanjan says:

        Yes I’v entered “” in the client browser. The IP is pinging from client machine and Service Scan on this IP reveiled “3 services running; 53:domain; 81:host2-ns; 444:snpp”.

        • Could you please give me the Network range of your Desktop? or 192.168.1.x? Or else? What is your Desktop IP range and have you tried by routing to ?

          My desktop ip, network range is but my ipfire range was i have routed to using:

          $ sudo route add default gw eth0
          $ sudo route add -net netmask gw eth0
          This will allow us to access web UI in

Got something to say? Join the discussion.

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.