IP Cop Setup

[labratza]

Hi there

I am trying to setup IP COP installed fine but my issue is the following. I have a bonded solution with Mweb so now I am going from the router into the ipcop machine and then the 2nd NIC i am going into a switch and from the switch into a test machine. I have enabled DHCP on the ipcop machine and it gets everything but just need to know how do I tell ipcop to route the connection(without IPcop trying to dial a connection) from NIC 0 to NIC 1? need to get this setup ASAP or do you guys have any other solutions that I can use to get content filtering right? the machine I am using is a Dell Poweredge 350 with a 800MHz p3 processor with 512mb ram. your guys help would be gladly apprciated...

 

[biometrics]

We use Smoothwall but it's probably about the same. The one NIC will be called Red and the other Green. Red goes to the internet and Green to your LAN. You should not need to tell it how to route, it should be automatic.

The major thing we got stuck with is not setting up Red to do a PPPoE dialup over ADSL.

 

[labratza]

well will give smoothwall a shot then. can I do content filtering and bandwidth manegment through it? that is my main issue want to stop the abuse on the network

 

[hyarion]

On the ipcop box login on the screen (or via putty) and type "setup". In the setup go to the network settings and change the settings for the RED card. You want to change it to either

DHCP - if the mweb router gives out dhcp
or
STATIC - and then set an ip address for the red card. You will then also need to set the gateway and dns servers.

When set this way it will ignore any dialup configuration you've setup in the web interface.

 

[jord@n]

Download Endian Firewall Community 2.4.1 - www.endian.com

 

[durbandave]

Clear OS Enterprise Edition

You can try the Clear OS Enterprise Edition

It is a really great software, and although it is not a free version it is still very cheap compared to hardware firewall and MS based ( which are rubbish anyway )

The full OS and install is downloadable like IP Cop on one ISO image.

From there you can also subscribe to various other services which may be useful to your company.
Website is

http://www.clearcenter.com/Software/clearos-subscriptions.html

 

[Lionwood]

Try Untangle. Most of the modules are free, and it is simple to set up and has more features than IPCop.

 

[MickZA]

On the ipcop box login on the screen (or via putty) and type "setup". In the setup go to the network settings and change the settings for the RED card. You want to change it to either

DHCP - if the mweb router gives out dhcp
or
STATIC - and then set an ip address for the red card. You will then also need to set the gateway and dns servers.

When set this way it will ignore any dialup configuration you've setup in the web interface.

+1

 

[thisgeek]

Personally I'd recommend pfsense.

 

[The_Unbeliever]

Personally it does not matter what device you have on $RED_DEV - whether it be PPPoE, static, satellite or whatever, the basic is this :

1. Your Internet line is on RED.
There are two types :
static - the ISP either will program their router to connect and make more than one I available for your use (commonly with some uncapped accounts)
DHCP (dynamic) - here this will be any combination of the following :
a) The router does the dialup, but hands out DHCP packets
b) You have put the router into bridged mode, DHCP will be passed on to the Smoothwall's RED interface when connecting to your ISP.

What you'll need to do is to find out from your ISP whether the bonding device have a dynamic or static IP on your side - then you will have to configure your Smoothwall/IPCop/whatever accordingly.

On the GREEN side (safe side) you'll have to decide whether to offer DHCP services to the rest of the network or not.

There are also several add-ons which you can install on your Smoothwall to make it more flexible, do take a look here : --> http://community.smoothwall.org/forum/viewtopic.php?f=26&t=23845

Remember, all of us haven't got it right the first time, so be prepared to try and try again - learning a lot in the process and having some fun

Regards

Libs

 

[The_Unbeliever]

Basically it does not matter which firewall distro you're running - as long as it blocks bad packets.

The main thing is you must be comfortable in using it without having to resort to reinstalling or some other funky stuff just to get it to do what you want.

Some firewalls, like Smoothwall, are very limited in what services you can offer to users. (Only firewalling).

Others, like ClearOS offer FTP/file sharing and others.

Take your time, try out more than one and decide what will work for you.

 

[MickZA]

Just a note on IPCop (if that's what you opted for), you should be using v1.4.21 not v1.9 which is still in beta.