Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Chapter 7. Virtual Private Networks

As discussed in earlier chapters, many of the technologies underpinning the way in which networking works were designed with considerations quite different to those facing IT professionals and computer users today. Among the most salient of these are concerns about security.

Remote access, another principal concern among IT Professionals, is the practice of allowing employees, contractors, clients, and suppliers to access resources and services over a Wide Area Network or the Internet. This practice, since it necessarily involves not only connecting a company's internal network to the Internet but also allowing traffic from the Internet to gain access to the internal network, brings with it inherent security risks. Some of them stem from the ability that remote access systems give to an attacker to probe and attack the network, while some of them stem from the fact that conventionally, information is passed over the Internet in plain text with no form...