From Ryan Groom,
Your Guide to Business Security.
FREE Newsletter. Sign Up Now!

Configuring IPCop (4.5 Stars)

IPCop for the average user is great once it is installed it is ready to go. It blocks all inbound traffic and allows all outbound traffic. DHCP or the Snort Intrusion Detection System can be quickly configured through the web interface. Think of IPCop as your locked door and Snort as your alarm system.

If you have a web page that needs to be accessed from the Internet, simply set up a server in your DMZ (Orange Interface) and set the address for the external IP address and the port as shown in the port forwarding screen shot.

You can also allow DMZ pinholes from the Orange network to the Green network, for example, if a web server on the DMZ needs to talk to a SQL server on the back end. Instead of publishing the SQL server out in the DMZ (a definite no-no) you could allow the web server to talk to the SQL server on a pre defined port. This is simple and adds a layer of security to your configuration. DMZ pinholes is shown in the DMZ pinholes screen shot.

The VPN configuration is a little complicated for the average non technical user and may require some help. Additional information can be found at the IPCop site. Connecting to IPCop box via VPN from another remote connection, using OPEN VPN is one possibility.

Reliability - (4.5 Stars)

Bar none, IPCop is extremely reliable. I have had IPCop running on a system in our shop for the last 18 months without a reboot. The system is only as reliable as the computer you build it on though. So if you have coupled together old computer parts, you may be wary of using as your one and only firewall. A good backup strategy is extremely useful too, in case you do have to rebuild the system. The system can have all configuration settings backup to a floppy for easy restoration. This can be achieved through the backup interface on the web management tool as seen in the backup screen shot.

Conclusion

Pound for pound, IPCop is a solid reliable and easily configurable firewall solution that is easy on the pocket book as well as technical prowess. For its simple configuration, it delivers a secure and viable firewall solution for many users of small and medium size businesses. In the category of free open source firewalls I would give l I would give IPCop a 4.5 out of 5 stars.