Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Managing Bandwidth without a Cache


HTTP is not the only protocol on our networks that we need adequate bandwidth for. For example if we have online games or voice and video communication on our network, these services usually warrant higher priority than others due to their time-sensitive use. You wouldn't want to have a choppy voice conversation with a client because one of the users on the network is downloading large files, or on a home network, you wouldn't want to lose your high score in your online game because someone decided to start listening to their online radio station. This is where traffic shaping comes in.

Traffic Shaping Basics

In order to ensure Quality of Service (QoS), we have to control traffic so that high priority traffic is treated as just that, high priority! With traffic shaping, we can use all the same parameters we use in packet filtering; however, instead of deciding whether to pass the traffic, we make more complicated decisions about which traffic is afforded...