Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.

Related Content you might be interested in

Current Title:

Small book image
Configuring IPCop Firewalls: Closing Borders with Open Source
Oct, 2006 | 244 pages
No titles found
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Configuring IPCop Firewalls
Credits
Credits
About the Authors
About the Authors
About the Reviewers
About the Reviewers
Preface
Preface
Free Chapter
1
Introduction to Firewalls
Introduction to Firewalls
An Introduction to (TCP/IP) Networking
The Purpose of Firewalls
The OSI Model
How Networks are Structured
Traffic Filtering
Other Services Sometimes Run on Firewalls
Summary
2
Introduction to IPCop
Introduction to IPCop
Free and Open Source Software
The Purpose of IPCop
The Benefits of Building on Stable Components
The Gap IPCop Fills
Features of IPCop
Virtual Private Networking
Why IPCop?
Summary
3
Deploying IPCop and Designing a Network
Deploying IPCop and Designing a Network
Trust Relationships between the Interfaces
Altering IPCop Functionality
Topology One: NAT Firewall
Topology Two: NAT Firewall with DMZ
Topology Three: NAT Firewall with DMZ and Wireless
Planning Site-To-Site VPN Topologies
Summary
4
Installing IPCop
Installing IPCop
Hardware Requirements
Other Hardware Considerations
The Installation Procedure
Green Interface Configuration
First Boot
Summary
5
Basic IPCop Usage
Basic IPCop Usage
The System Menu
Checking the Status of Our IPCop Firewall
Network Status
Services
Firewall Functionality
Summary
6
Intrusion Detection with IPCop
Intrusion Detection with IPCop
Introduction to IDS
Introduction to Snort
Do We Need an IDS?
How Does an IDS Work?
Using Snort with IPCop
Monitoring the Logs
Log Analysis Options
What to Do Next?
Summary
7
Virtual Private Networks
Virtual Private Networks
What is a VPN?
Summary
8
Managing Bandwidth with IPCop
Managing Bandwidth with IPCop
The Bandwidth Problem
The HTTP Problem
The Solutions: Proxying and Caching
Introduction to Squid
Configuring Squid
Cache Management
Managing Bandwidth without a Cache
Summary
9
Customizing IPCop
Customizing IPCop
Addons
Firewall Addons Server
Common Addons
Summary
10
Testing, Auditing, and Hardening IPCop
Testing, Auditing, and Hardening IPCop
Security and Patch Management
Basic Firewall Hardening
Advanced Hardening
Logfiles and Monitoring Usage
Usage and Denial of Service
Where to Go Next?
Summary
11
IPCop Support
IPCop Support
Support
Summary

Configuring IPCop Firewalls

Copyright © 2006 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, Packt Publishing, nor its dealers or distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: September 2006

Production Reference: 1160906

Published by Packt Publishing Ltd. 32 Lincoln Road Olton Birmingham, B27 6PA, UK.

ISBN 10: 1-904811-36-1

ISBN 13: 978-1-904811-36-7

www.packtpub.com

Cover Image by www.visionwt.com

Previous Section
Next Chapter