Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Why IPCop?


When evaluating IPCop for use within our environment, we should look at the functionality it provides, which is evident from the feature list that we have just seen. Then, we need to determine if it will be the most effective solution for our network. Generally for a small to medium sized network IPCop is extremely beneficial and can simplify network administration greatly. However, for very large networks where we have a variety of segments all interconnecting with varying mechanisms we may find IPCop inadequate. It's important to figure out how exactly our network will fit together and then choose IPCop if there is a role it could fit in to. For the SOHO network this may be a very simple topology and may require little thought. In a larger network IPCop may have scope for deployment in specific roles within the infrastructure, for example as the gateway device of key remote networks, such as branch offices.