Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Usage and Denial of Service


Not all security risks stem from the compromise of software and credentials. Many security risks commonly referred to as Denial of Service, or DoS, attacks, affect the quality of service offered by a computer system, and can be just as damaging as a system compromise. If your firewall is down and you cannot send email to a customer to confirm a business deal, the loss of revenue could be greater than if your firewall were compromised and the intruder knew about the deal.

It is extremely important for the security of our systems to ensure that the hardware they run on is adequate, and therefore performance monitoring, as mentioned duringChapter 5, should be carried out regularly, and unusual activity, such as high network or CPU usage, should be accounted for. Such administration forms an important part of making sure that our firewall is not only secured against simple attacks, but is also resilient both against DoS attacks and surges in usage.

If one performance...