Configuring IPCop firewalls : closing borders with open source : how to set up, configure, and manage your Linux firewall, Web proxy, DHCP, DNS, Time Server, and VPN with this powerful open source solution

This book is designed and organized so you can get the most out of it in the shortest amount of time. You do not have to read this book straight through in page order. Once you are comfortable using Linux, you can use this book as a reference: Look up a topic of interest in the table of contents or index and read about it. Or think of the book as a catalog of Linux topics: Flip through the pages until a topic catches your eye. The book includes many pointers to Web sites where you can get additional information: Consider the Internet an extension of this book. A Practical Guide to FedoraTM and Red Hat® Enterprise Linux®, College Edition, is structured with the following features: * In this book, the term Fedora/RHEL refers to both Fedora and Red Hat Enterprise Linux. Features that apply to only one operating system or the other are marked as such using these indicators: FEDORA or RHEL. * Optional sections enable you to read the book at different levels, returning to more difficult material when you are ready to delve into it. * Caution boxes highlight procedures that can easily go wrong, giving you guidance before you run into trouble. * Tip boxes highlight ways that you can save time by doing something differently or situations when it may be useful or just interesting to have additional information. * Security boxes point out places where you can make a system more secure. The security appendix presents a quick background in system security issues. * Concepts are illustrated by practical examples throughout the book. * Chapter summaries review the important points covered in each chapter. * Review exercises are included at the end of each chapter for readers who want to further hone their skills. Answers to even-numbered exercises are at www.sobell.com. * This book provides resources for finding software on the Internet. It also explains how download and install software using yum, BitTorrent, and, for Red Hat Enterprise Linux, Red Hat Network (RHN). * The glossary defines more than 500 common terms. * The book describes in detail many important GNU tools, including the gcc C compiler, the gdb debugger, the GNU Configure and Build System, make, and gzip. * Pointers throughout the text provide help in obtaining online documentation from many sources including the local system, the Red Hat Web site, the Fedora Project Web site, and other locations on the Internet. * Many useful URLs (Internet addresses) point to sites where you can obtain software, security programs and information, and more. * The comprehensive index helps you locate topics quickly and easily. Скриншоты (http://fastpic.ru/view/2/2010/0221/ff2259398e97bc0fcc471f9bf5c8f123.jpg.html) (http://fastpic.ru/view/2/2010/0221/71ea8dbfee03ae0617e86e541bad2540.jpg.html) (http://fastpic.ru/view/2/2010/0221/7260cfb996c0a79b70df71417d1a8ef8.jpg.html) Configuring IPCop Firewalls -1 Table of Contents 8 Preface 14 Chapter 1: Introduction to Firewalls 18 An Introduction to (TCP/IP) Networking 18 The Purpose of Firewalls 20 The OSI Model 23 Layer 1: The Physical Layer 23 Layer 2: The Data Link Layer 24 Layer 3: The Network Layer 24 Layer 4: The Transport Layer 24 Layer 5: The Session Layer 25 Layer 6: The Presentation Layer 25 Layer 7: The Application Layer 25 How Networks are Structured 26 Servers and Clients 27 Switches and Hubs 28 Routers 32 Routers, Firewalls, and NAT 34 Network Address Translation 35 Combined Role Devices 38 Traffic Filtering 39 Personal Firewalls 39 Stateless Packet Filtering 41 Stateful Packet Filtering 41 Application-Layer Firewalling 42 Proxy Servers 44 Other Services Sometimes Run on Firewalls 46 DNS 46 DHCP 49 Summary 50 Chapter 2: Introduction to IPCop 52 Free and Open Source Software 52 Forking IPCop 54 The Purpose of IPCop 56 The Benefits of Building on Stable Components 56 The Gap IPCop Fills 58 Features of IPCop 59 Web Interface 59 Network Interfaces 61 The Green Network Interface 61 The Red Network Interface 62 USB and PCI ADSL Modems 62 ISDN Modems 64 Analog (POTS) Modems 64 Cable and Satellite Internet 65 The Orange Network Interface 65 The Blue Network Interfaces 66 Simple Administration and Monitoring 66 Modem Settings 68 Services 69 Web Proxy 69 DHCP 70 Dynamic DNS 70 Time Server 72 Advanced Network Services 73 Port Forwarding 74 Virtual Private Networking 76 ProPolice Stack Protection 76 Why IPCop? 77 Summary 77 Chapter 3: Deploying IPCop and Designing a Network 78 Trust Relationships between the Interfaces 78 Altering IPCop Functionality 80 Topology One: NAT Firewall 80 Topology Two: NAT Firewall with DMZ 84 Topology Three: NAT Firewall with DMZ and Wireless 88 Planning Site-To-Site VPN Topologies 92 Summary 93 Chapter 4: Installing IPCop 94 Hardware Requirements 94 Other Hardware Considerations 95 The Installation Procedure 95 Installation Media 97 Hard Drive Partitioning and Formatting 98 Restore Configuration from Floppy Backup 98 Green Interface Configuration 99 Finished? 100 Locale Settings 101 Hostname 101 DNS Domain Name 102 ISDN Configuration 103 Network Configuration 103 Drivers and Card Assignment 104 Address Settings 105 DNS and Default Gateway 105 DHCP Server 106 Finished! 107 First Boot 108 Summary 109 Chapter 5: Basic IPCop Usage 110 The System Menu 111 Software Updates 111 Passwords 113 SSH Access 113 Connecting to SSH 114 A Little More about SSH 116 GUI Settings 119 Backup 119 Shutdown 121 Checking the Status of Our IPCop Firewall 122 Network Status 125 System Graphs 126 Network Graphs 127 Connections 128 Services 128 DHCP Server 128 Dynamic DNS 130 Edit Hosts 133 Time Server 133 Firewall Functionality 134 External Access 135 Port Forwarding 135 Firewall Options 137 Network Troubleshooting with Ping 138 Summary 139 Chapter 6: Intrusion Detection with IPCop 140 Introduction to IDS 140 Introduction to Snort 141 Do We Need an IDS? 141 How Does an IDS Work? 142 Using Snort with IPCop 143 Monitoring the Logs 143 Priority 145 Log Analysis Options 146 Perl Scripts 146 ACID and BASE 147 What to Do Next? 147 Summary 147 Chapter 7: Virtual Private Networks 150 What Is a VPN? 150 IPSec 152 A Little More about Deploying IPSec 154 Prerequisites for a Successful VPN 156 Verifying Connectivity 161 Host-to-Net Connections Using Pre-Shared Keys 162 Host-to-Net Connections Using Certificates 163 A Brief Explanation of Certificates and X.509 163 Certificates with IPSec in IPCop 168 Site-to-Site VPNs Using Certificates 170 VPN Authentication Options 170 Configuring Clients for VPNs 171 The Blue Zone 172 Prerequisites for a Blue Zone VPN 173 Setup 173 Summary 173 Chapter 8: Managing Bandwidth with IPCop 176 The Bandwidth Problem 176 The HTTP Problem 177 The Solutions: Proxying and Caching 177 Introduction to Squid 178 Configuring Squid 178 Cache Management 179 Transfer Limits 180 Managing Bandwidth without a Cache 180 Traffic Shaping Basics 180 Traffic Shaping Configuration 181 Adding a Traffic Shaping Service 182 Editing a Traffic Shaping Service 183 Summary 183 Chapter 9: Customizing IPCop 184 Addons 184 Firewall Addons Server 184 Installing Addons 188 Common Addons 188 SquidGuard 189 Enhanced Filtering 191 Blue Access 193 LogSend 194 Copfilter 196 Status 198 Email 199 Monitoring 200 POP3 Filtering 200 SMTP Filtering 201 HTTP Filter (and FTP) 202 AntiSPAM 203 AntiVirus 204 Tests and Logs 204 Up and Running! 205 Summary 206 Chapter 10: Testing, Auditing, and Hardening IPCop 208 Security and Patch Management 208 Why We Should Be Concerned 209 Appliances and How this Affects Our Management of IPCop 211 Basic Firewall Hardening 211 Checking What Exposure Our Firewall Has to Clients 212 What is Running on Our Firewall? 216 Advanced Hardening 217 Stack-Smashing Protector (Propolice) 217 Service Hardening 218 Logfiles and Monitoring Usage 218 Establishing a Baseline with Graphs 218 Logfiles 219 Usage and Denial of Service 220 CPU and Memory Usage 221 Logged-In Users 224 Other Security Analysis Tools 225 Where to Go Next? 225 Full-Disclosure 226 Wikipedia 226 SecurityFocus 226 Literature 226 Summary 228 Chapter 11: IPCop Support 230 Support 230 User Mailing Lists 231 Internet Relay Chat (IRC) 231 Returning the Support 231 Summary 232 Index 234

this Book Is An Easy-to-read Guide To Using Ipcop In A Variety Of Different Roles Within The Network. The Book Is Written In A Very Friendly Style That Makes This Complex Topic Easy And A Joy To Read. It First Covers Basic Ipcop Concepts, Then Moves To Introduce Basic Ipcop Configurations, Before Covering Advanced Uses Of Ipcop. This Book Is For Both Experienced And New Ipcop Users.

ipcop Is A Powerful, Open Source, Linux Based Firewall Distribution For Primarily Small Office Or Home (soho) Networks, Although It Can Be Used In Larger Networks. It Provides Most Of The Features That You Would Expect A Modern Firewall To Have, And What Is Most Important Is That It Sets This All Up For You In A Highly Automated And Simplified Way.

this Book Is An Easy Introduction To This Popular Application. After Introducing And Explaining The Foundations Of Firewalling And Networking And Why They're Important, The Book Moves On To Cover Using Ipcop, From Installing It, Through Configuring It, To More Advanced Features, Such As Configuring Ipcop To Work As An Ids, Vpn And Using It For Bandwidth Management. While Providing Necessary Theoretical Background, The Book Takes A Practical Approach, Presenting Sample Configurations For Home Users, Small Businesses, And Large Businesses. The Book Contains Plenty Of Illustrative Examples.

chapter 1 Briefly Introduces Some Firewall And Networking Concepts. The Chapter Introduces The Roles Of Several Common Networking Devices And Explains How Firewalls Fit Into This.
chapter 2 Introduces The Ipcop Package Itself, Discussing How Ipcop's Red/orange/blue/green Interfaces Fit Into A Network Topology. It Then Covers The Configuration Of Ipcopin Other Common Roles, Such As Those Of A Web Proxy, Dhcp, Dns, Time, And Vpn Server.
chapter 3 Covers Three Sample Scenarios Where We Learn How To Deploy Ipcop, How Ipcop Interfaces Connect To Each Other And To The Network As A Whole.
chapter 4 Covers Installing Ipcop. It Outlines The System Configuration Required To Run Ipcop, And Explains The Configuration Required To Get Ipcop Up And Running.
in Chapter 5, We Will Learn How To Employ The Various Tools Ipcop Provides Us With To Administrate, Operate, Troubleshoot, And Monitor Our Ipcop Firewall
chapter 6 Starts Off With Explaining The Need For An Ids In Our System And Then Goes On To Explain How To Use The Snort Ids With Ipcop.
chapter 7 Introduces The Vpn Concept And Explains How To Set Up An Ipsec Vpn Configuration For A System. Special Focus Is Laid On Configuring The Blue Zone - A Secured Wireless Network Augmenting The Security Of A Wireless Segment, Even One Already Using Wep Or Wpa.
chapter 8 Demonstrates How To Manage Bandwidth Using Ipcop Making Use Of Traffic Shaping Techniques And Cache Management. The Chapter Also Covers The Configuration Of The Squid Web Proxy And Caching System.
chapter 9 Focuses On The Vast Range Of Add-ons Available To Configure Ipcop To Suit Our Needs. We See How To Install Add-ons And Then Learn More About Common Add-ons Like Squidguard, Enhanced Filtering, Blue Access, Logsend, And Copfilter.
chapter 10 Covers Ipcop Security Risks, Patch Management And Some Security And Auditing Tools And Tests.
chapter 11 Outlines The Support Ipcop Users Have In The Form Of Mailing Lists And Irc.

the Book Is Suitable For Anyone Interested In Securing Their Networks With Ipcop - From Those New To Networking And Firewalls, To Networking And It Professionals With Previous Experience Of Ipcop. No Knowledge Of Linux Or Ipcop Is Required.

How to setup, configure and manage your Linux firewall, web proxy, DHCP, DNS, time server, and VPN with this powerful Open Source solution Learn how to install, configure, and set up IPCop on your Linux servers Use IPCop as a web proxy, DHCP, DNS, time server, and VPN Advanced add-on management In Detail IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples. This book is an easy-to-read guide to using IPCop in a variety of different roles within the network. The book is written in a very friendly style that makes this complex topic easy and a joy to read. It first covers basic IPCop concepts, then moves to introduce basic IPCop configurations, before covering advanced uses of IPCop. This book is for both experienced and new IPCop users In Detail IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way.This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples. This book is an easy-to-read guide to using IPCop in a variety of different roles within the network. The book is written in a very friendly style that makes this complex topic easy and a joy to read. It first covers basic IPCop concepts, then moves to introduce basic IPCop configurations, before covering advanced uses of IPCop. This book is for both experienced and new IPCop users.Who this book is for Anyone interested in securing their networks with IPCop from those new to networking and firewalls, to networking and IT Professionals with previous experience of IPCop. No knowledge of Linux or IPCop is required Annotation This book is an easy-to-read guide to using IPCop in a variety of different roles within the network. The book is written in a very friendly style that makes this complex topic easy and a joy to read. It first covers basic IPCop concepts, then moves to introduce basic IPCop configurations, before covering advanced uses of IPCop. This book is for both experienced and new IPCop users. IPCop is a powerful, open source, Linux based firewall distribution for primarily Small Office Or Home (SOHO) networks, although it can be used in larger networks. It provides most of the features that you would expect a modern firewall to have, and what is most important is that it sets this all up for you in a highly automated and simplified way. This book is an easy introduction to this popular application. After introducing and explaining the foundations of firewalling and networking and why they're important, the book moves on to cover using IPCop, from installing it, through configuring it, to more advanced features, such as configuring IPCop to work as an IDS, VPN and using it for bandwidth management. While providing necessary theoretical background, the book takes a practical approach, presenting sample configurations for home users, small businesses, and large businesses. The book contains plenty of illustrative examples Anyone interested in securing their networks with IPCop — from those new to networking and firewalls, to networking and IT Professionals with previous experience of IPCop. No knowledge of Linux or IPCop is required.