Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Configuring Squid


The Squid configuration screen in IPCop is very easy to follow and you can get away with clicking a couple of boxes for a basic configuration.

In this example we have only a Green interface present; we can, however, enable the proxy on all other interfaces—except Red, which is the internet connection.

The first step is quite obvious; we enable the proxy on the interfaces we need it on by clicking the first checkbox and then choosing the port the proxy listens on (800 by default in IPCop—although Squid usually runs on port 3128). We can also check the Log Enabled box, which is interface non-specific, so we either log all or log none. It's a good idea to enable this if we want to monitor the proxy at some point. We can also chain this proxy through one provided by our ISP for example by configuring the Upstream options, which would be provided by the ISP or other proxy service provider. The host port to connect to, and a user name and password may be necessary.

Transparency...