Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

The System Menu


The items in the System menu are fairly critical to the system's functionality.

Software Updates

The first thing we should do, post-installation, is to ensure that our IPCop firewall has the appropriate updates applied. Although many software updates provide updates and bug fixes for new features and existing software packages, some address new security issues, and in order to maintain the integrity of the firewall; it is important to apply these as frequently as possible.

The Software Updates functionality is provided under the System | Updates menu.

The Refresh update list button connects to the IPCop servers and retrieves a list of released updates—the Available updates portion of the page will indicate when there are updates that need to be supplied, and provide a download link. The updates must be manually downloaded as-is (not unpacked or extracted) from the Internet and then uploaded (via the Browse button) to the firewall.

As the name of the update files (*.tgz.gpg...