Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

The Gap IPCop Fills


There are a variety of different levels of firewall available. At one end of the spectrum, there are enterprise systems such as Check Point and ISA, which perform all kinds of powerful functions and can control the traffic for networks of vastly varying sizes and topologies. At the other end of the spectrum, we have personal firewalls running on host machines such as Agnitum, ZoneAlarm, and the built-in firewall in Windows XP Service Pack 2, which protect a single machine. There are also many home routers that provide basic firewall functionality. This leaves us with the question as to which of these roles IPCop is appropriate for, and whether it suits our needs.

IPCop is best suited, as we discussed earlier, to the SOHO network. If our network is relatively small with a single Internet connection, such as a home network or small business, or we have a couple of sites with separate internet connections that require linking together in a medium-sized business then we can...