If you want to protect your network from the internet, one of the things you need is a firewall, in this tutorial I will show you how to install ipcop firewall, for this all you need is an old pc and the free ipcop installation software. IPCop doesn’t require a lot of hardware to run, it will run on 64M of memory although I recommend at least 128M, it all depends on how many services you’re planning to run, also it doesn’t require a lot of hard drive, unless you’re planning to do a lot of logging, and web cache, and finally processor speed it’s not really that important
IPCop is a Linux distribution which aims to provide a simple-to-manage firewall appliance based
on PC hardware. IPCop is a Stateful firewall built on the Linux netfilter framework. Originally a
fork of the Smoothwall Linux firewall, the projects are developed independently, and have now
diverged significantly. IPCop includes a simple user managed update mechanism to install security
updates when required.
IPCop’s main feature is as a firewall system for small offices or home networks. It is free to
use and therefore the only costs in getting it running are the hardware. Here are some of the
4 interfaces with typical behavior:
1- GREEN: Inside network
2- RED: Outside network/Internet
3- ORANGE : DMZ (accessible from in and outside)
4- BLUE : inside network for wifi (connect an Access point to this interface)
For this tutorial I’ll be using the basic GREEN+RED network configuration, which only needs two cards.
Here are some of the core services running on IPCop.
1- DHCP client / server
2- Dynamic DNS
2- Host list settable from web interface
3- HTTP / FTP proxy (squid)
4- IDS (snort) on all interfaces
5- Log local or remote
6- NTP client / server
7- SSH server (PSK or password)
8- Traffic shaping (red interface)
Here are some important links you may want to check out before proceeding with the installation.
IPCop hardware compatibility list: here
IPCop installation documentation: here
IPCop installation image: here
Finally before you proceed with the installation, make sure you “backup all your data”…