Configuring IPCop Firewalls: Closing Borders with Open Source: How to setup, configure and manage your Linux firewall, web proxy, DHCP, DNS, time server, ... VPN with this powerful Open Source solution (Paperback)

~ James Eaton-Lee (Author), Barrie Dempster (Author)

Editorial Reviews

Product Description

How to setup, configure and manage your Linux firewall, web proxy, DHCP, DNS, time server, and VPN with this powerful Open Source solution

• Learn how to install, configure, and set up IPCop on your Linux servers
• Use IPCop as a web proxy, DHCP, DNS, time server, and VPN
• Advanced add-on management

In Detail

IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way.

This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples.

What you will learn from this book? Chapter 1 briefly introduces some firewall and networking concepts. The chapter introduces the roles of several common networking devices and explains how firewalls fit into this.

Chapter 2 introduces the IPCop package itself, discussing how IPCop's red/orange/blue/green interfaces fit into a network topology. It then covers the configuration of IPCop in other common roles, such as those of a web proxy, DHCP, DNS, time, and VPN server.

Chapter 3 covers three sample scenarios where we learn how to deploy IPCop, how IPCop interfaces connect to each other and to the network as a whole.

Chapter 4 covers installing IPCop. It outlines the system configuration required to run IPCop, and explains the configuration required to get IPCop up and running.

In Chapter 5, we will learn how to employ the various tools IPCop provides us with to administrate, operate, troubleshoot, and monitor our IPCop firewall

Chapter 6 starts off with explaining the need for an IDS in our system and then goes on to explain how to use the SNORT IDS with IPCop.

Chapter 7 introduces the VPN concept and explains how to set up an IPSec VPN configuration for a system. Special focus is laid on configuring the blue zone -- a secured wireless network augmenting the security of a wireless segment, even one already using WEP or WPA.

Chapter 8 demonstrates how to manage bandwidth using IPCop making use of traffic shaping techniques and cache management. The chapter also covers the configuration of the Squid web proxy and caching system.

Chapter 9 focuses on the vast range of add-ons available to configure IPCop to suit our needs. We see how to install add-ons and then learn more about common add-ons like SquidGuard, Enhanced Filtering, Blue Access, LogSend, and CopFilter.

Chapter 10 covers IPCop security risks, patch management and some security and auditing tools and tests.

Chapter 11 outlines the support IPCop users have in the form of mailing lists and IRC.

Who this book is written for?

Anyone interested in securing their networks with IPCop -- from those new to networking and firewalls, to networking and IT Professionals with previous experience of IPCop. No knowledge of Linux or IPCop is required.

About the Author

Barrie Dempster

Barrie Dempster is currently employed as a Senior Security Consultant for NGS Software Ltd a world-renowned security consultancy well known for their focus in enterprise-level application vulnerability research and database security. He has a background in Infrastructure and Information Security in a number of specialised environments such as financial services institutions, telecommunications companies, call centres, and other organisations across multiple continents. Barrie has experience in the integration of network infrastructure and telecommunications systems requiring high calibre secure design, testing and management. He has been involved in a variety of projects from the design and implementation of Internet banking systems to large-scale conferencing and telephony infrastructure, as well as penetration testing and other security assessments of business critical infrastructure.

James Eaton-Lee

James Eaton-Lee works as a Consultant specializing in Infrastructure Security who has worked with clients ranging from small businesses with a handful of employees to multinational banks. He has a varied background, including experience working with IT in ISPs, manufacturing firms, and call centers. James has been involved in the integration of a range of systems, from analogue and VOIP telephony to NT and AD domains in mission-critical environments with thousands of hosts, as well as UNIX & LINUX servers in a variety of roles. James is a strong advocate of the use of appropriate technology, and the need to make technology more approachable and flexible for businesses of all sizes, but especially in the SME marketplace in which technology is often forgotten and avoided. James has been a strong believer in the relevancy and merit of Open Source and Free Software for a number of years and - wherever appropriate - uses it for himself and his clients, integrating it fluidly with other technologies.

Product Details

• Paperback: 244 pages
• Publisher: Packt Publishing (October 1, 2006)
• Language: English
• ISBN-10: 1904811361
• ISBN-13: 978-1904811367
• Product Dimensions: 9.1 x 7.5 x 0.6 inches
• Shipping Weight: 14.9 ounces (View shipping rates and policies)
• Average Customer Review: 3.0 out of 5 stars  See all reviews (2 customer reviews)
• Amazon.com Sales Rank: #740,722 in Books (See Bestsellers in Books)

  Popular in these categories: (What's this?)

  #4 in	Books > Computers & Internet > Web Development > Programming > Linux Web
  #11 in	Books > Computers & Internet > Operating Systems > Unix > DNS & Bind
  #23 in	Books > Computers & Internet > Operating Systems > Unix > Administration

Customer Reviews

Most Helpful Customer Reviews

1 of 1 people found the following review helpful:

4.0 out of 5 stars Good book, but not better than freely available documentation, January 8, 2007

By	Andres Paglayan (Santa Fe, NM USA) - See all my reviews (REAL NAME)

Amazon Verified Purchase

I use IPCop at a 30 users network. We also route specific applications through different T1 connections, and have plenty of custom iptables rules.
IPCop per se is a great product.
I can't say the book is bad but it does not add any substantial information to the documentation you can find at IPCop site and download for free.
Buy it only if you want to pay for freely available documentation or if you are a book bluff.

2.0 out of 5 stars Decent book for novice, but little content or depth, August 12, 2007

By	A. Dornbusch (Austin, TX USA) - See all my reviews (REAL NAME)

I frankly expected more from this book. It is short (220 pages), and consists largely of screenshots of IPCop configuration screens interspersed with descriptions of what each page means. If you have no idea how a firewall works, this book will help you get started. If you have any significant networking experience and are looking for a book to assist you with configuring and debugging a network firewall, then it won't be of much help.