Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Trust Relationships between the Interfaces


As we now understand, the four types of network interface—Green, Red, Blue, and Orange—supported by IPCop have differing levels of trust associated with them. Here is a simple table outlining what traffic is allowed to go to and from which interfaces. This table, and the knowledge contained within it, should form the basis of our planning when considering how many interfaces to use and what to use them for. This is basically the Traffic Flow diagram from the IPCop administrative guide (http://www.ipcop.org/1.4.0/en/admin/html/section-firewall.html).

Interface From

Interface To

Status

How To Access

Red

Red

Red

Red

Firewall

Orange

Blue

Green

CLOSED

CLOSED

CLOSED

CLOSED

External Access

Port Forwarding

Port Forwarding / VPN

Port Forwarding / VPN

Orange

Orange

Orange

Orange

Firewall

Red

Blue

Green

CLOSED

OPEN

CLOSED

CLOSED

  

DMZ Pinholes

DMZ Pinholes

Blue

Blue

Blue

Blue

Firewall

Red

Orange

Green

CLOSED

CLOSED

CLOSED

CLOSED

Blue Access...