IPcop

X

xane

Guest
Just a quick (re-)plug for a software router/firewall setup I have been using for the last couple of years, it's called IPcop and it was developed from Smoothwall when they decided to go corporate. Basically this is a Linux distro concentrating on a router/firewall setup, with a small footprint and reduced functionality to prevent hacking, and totally within the GPL licence.

Last night I was forced to upgrade to the latest version 1.3.0, after running the "beta" 0.1.1 for a long time I felt it was something that needed to be done anyway.

Disappointingly, the minimum footprint has gone from around 20MB to 125MB + 2x RAM size. Consequently the trusty old 120MB Seagate HDD I had dug out was no longer doing the job, and I had to revert to an equally older 425MB Seagate and still remove a stick of RAM to get it to fit.

The new version is visually little different on the web interface, but there is a marked improvement in speed, both on bootup (which doesn't happen often, my version 0.1.1 had been running for 90 days) and on connection.

Some nice features include built in NTP time synchronisation, I also loaded up a module that turned the machine into a time server itself so all the other machines on the network could sync with it. Version 1.3.0 is better suited for add-ons and a few websites provide some nice features and modifications.

I also took the opportunity to stick in a second LAN card and give myself room for an "orange" domain later on, i.e. one that is accessable from the internet ("red") but isolated from my own network ("green"), ideal for a web server or game server.

If you have old PC kit hanging around this is the best way to put it to good use, you only need a CD ROM to install and can easily get away with a low end CPU and small amount of RAM, although a decent LAN card is a must. If you are using the Alcatel "Frog" modem then a USB port is also required, the latest drivers are supplied with the build.
 
S

Sibanac

Guest
Having used alot of different firewall systems,
I finaly came to the point where i cant be arsed anymore realy.
Old hardware eventualy breaks.
Since my last Firewall broke i got a Dlink route and i must say i have not looked back since.
The thing does dhcp, logging, time sync, dmz, port forwarding, dyna dns, 7 port switch, vpn support all and i dont have to run a second computer all the time all this for € 65.

IPcop is more a powerfull and versitile, but i personaly feel that not having another beige box running all the time and maintaining it for me far outweighs those advantages
(ofcourse i still have a linux server running in my DMZ for web and DB stuff)

just my 2c
 
L

lovedaddy

Guest
Yep, IPCop is one quality quality piece of kit.
Improvments could be made however, would be nice to see a web frontend for HTB and other QoS type bandwidth control (I've heard its in the 1.3.1 cvs, but I'm not too bothered at the moment to try), ethernet bridging would be nice, as would multiple red interface (or backup PPP if your main link fails - a nice feature im using in smoothwall corp3 at work).

Better cron control maybe too.

But, yep, cannot agree more, IPCop = the business!
 
X

xane

Guest
Well, the "non-beta" IPcop seems to have opened the doors for add-ons, check out this site for a bunch of them.
 

Users who are viewing this thread

Top Bottom