Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Book Image

Configuring IPCop Firewalls: Closing Borders with Open Source

Overview of this book

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.
Table of Contents (16 chapters)
Configuring IPCop Firewalls
Credits
About the Authors
About the Reviewers
Preface
7
Virtual Private Networks
11
IPCop Support

Services


Although IPCop is a firewall package, it contains many pieces of functionality that are outside the scope of a plain firewall. DNS and DHCP functionality, for instance, are normally served by separate hosts. IPCop, designed for smaller deployments in which half a dozen different servers (router, firewall, DHCP server, DNS server, Proxy server, IDS, etc.) are simply not feasible, bundles all of this functionality together.

The Services tab is where we can configure many of the features in IPCop that are separate elements, and require more complex setup. Some of these are covered in their own chapter; others, which are almost always deployed with IPCop (such as DNS and DHCP), will be covered here.

DHCP Server

The top of the DHCP Server page allows us to reconfigure some of the options we set up when we installed IPCop (such as the start and end address and lease time). Others, such as options for WINS servers and the option for Additional DHCP Options, can now be added to our configuration...