Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Other Hardware Considerations


Although as a result of the minimum requirements for IPCop it is very tempting to put it on an old workstation or out-of-date PC, it is worth taking a step back to consider how we use it. In a home environment or in a very small office, an old PC may provide the requisite level of reliability, but it might not if internet access is critical, and especially if we use more complex functionality in IPCop such as VPNs or complex firewall rules, which are harder to duplicate, the damage caused by a hardware failure may be critical, even if we have backups.

A slightly more reliable, newer host therefore may be worth considering. There are also considerations based on the environment the firewall will be in. In a home or small office environment in which the firewall may not be in a server room or comms cupboard, the noise of an older PSU, while minimal, may be annoying. The power usage by such a server may also be a consideration—removing some unnecessary components...