Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Common Addons


We will now have a look at the configuration of some of the more common addons and how they are used. Since we have SquidGuard installed already, we can begin with this addon. We won't cover all of the addons in this text as they are quite numerous. We will, however, cover the most common and substantial ones. It's recommended that we at least familiarize ourselves with the other addons available, as they may fill a requirement we might later come to recognize.

SquidGuard

SquidGuard is a content-filtering plug-in, which can be installed with Squid. It is used primarily to block unsuitable content from the Web and can be configured with a dynamic set of rules, which include blanket bans of various subjects and/or black- and white-listing of sites depending on their perceived suitability for the audience on our network.

The SquidGuard configuration screen looks like this:

As we can see, we can filter on a variety of subjects, which are pre-defined in the SquidGuard configuration...