Smoothwall Express 3.1 – Full Firewall Control Mod

This is a must have for any Smoothwall Express Setup. This mod gives you full control of your interfaces including mutliple IP addresses, ports and mac control:

To install the mod simply run the following from command line:

**Make sure Smoothwall express has update 6 or above installed

cd /tmp
wget -O fullfirewallv3.1.6.tar.bz2 http://community.smoothwall.org/forum/download/file.php?id=5275
tar jxvf fullfirewallv3.1.6.tar.bz2 -C /
./install-ffc.pl 

Log back into the Smoothwall GUI and you will now see Firewall > Firewall Control interface.

For further reading take a look at the smoothwall community here

TIPS

1. To add a secondary red ip:

Networking > Interfaces > Enter Secondary Red IP address > Save

*This tutorial assumes that you already have Smoothwall Express 3.1 installed on your hardware of choice.

With BT Infinity becoming evermore available we decided to setup and test smoothwall as our Firewall of choice. After quite a bit of head scratching we were able to get things up and running.

Once you have Smoothwall up and running access the web interface (https and port 441 – http://x.x.x.x:441) and navigate to Network > Interfaces:

Here, simply select the PPPoE as the ‘Connection method:” and save. Now navigate to Network > ppp:

Here we enter a Profile name, BT username and password and the authentication method. Above is an example of the settings we used for our BT Infinity test line.

Now navigate to Control > Home and click connect. If everything has been entered correctly you should have a Firewall protected BT Infinity line. Enjoy.

Few things to note:

• Cat 5 from white modem to smoothwall red interface
• Cat 5 from green interface into your switch or machine
• Firewall > Outgoing > Make sure 80, 443 etc. are open so you can access the outside world from behind the Firewall.

If you are unable to access Smoothwall’s web interface but can shell OK carry out the following:

killall -9 httpd 

/usr/apache2/sbin/httpd -DSSL

Try and login again.

This is following on from setting up Smoothwall with BT Infinity – https://www.linuxtutorial.co.uk/smoothwall-express-bt-infinity-setup/

The issue I now had was giving our network a static IP address instead of Dynamic. This was to allow another host to allow a static IP through their Firewall.

The workaround for this was to assign an External (red) IP address to an Internal (Green) IP address.

BT will provide 5 extra static IPs for £5 per month.

To set this up:

1. Full Firewall – Multiple IPs
2. Set the required external red IP and the IP of the internal machine

Tpye the following into commandline:

/etc/rc.d/rc.netaddress.down; /etc/rc.d/rc.netaddress.up

Which logs out the following on screen:

Setting up firewall
Restarting DNS proxy
Bringing up interface aliases (if they exist)
Register: Already registered
got my.SmoothWall system info with id [xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx]
Setting up firewall
Starting traffic stats collector
Setting DMZ pinholes
Setting up advanced networking features
Setting up IP block
Setting external access rules
Setting up outgoing filter
Setting up timed access rules