Automatic time correction via NTP servers in Firewall

The NTP server you can use two different types on. For one, just the time of the firewall to keep the correct level. Second, you can then this same time the entire network for providing. This would allow each client to obtain the time from the NTP server and all computers on the network would be set to a synchronous clock. The correct time of the IPCop time server in turn can determine from an external NTP services, such as pool.ntp.org. In addition to manual correction IPCop can make them automatically. You can also try the Edit Hosts. With this screen you can easily file / etc / hosts edit, such as entries, add or delete or change. The Hosts file can also use very good example to block annoying advertising impressions or other websites. To do this simply enter the address to block the entry of 0.0.0.0 in the file / etc / hosts with it. However, it appears to mask any manual changes to the file / etc / hosts.

Traffic shaping, or regulating the flow network, can be shared in principle in two categories. One possibility is the general limitation of upload and download. The interesting feature is likely to be the prioritize of services at the port level. This means that you can give high network traffic status, Medium, or Low. For example, load value that e-mails reach as quickly as possible to the receiver and get the web surfer is of secondary importance to the course, should you prioritize the SMTP port 25 as high, and web traffic on ports 80 and 443 as medium or low. If this sample configuration uses port 25 not receiving ports 80 and 443, the full bandwidth. These limitations can carry you with any of the available ports.

IPCop also has Snort, the de facto standard for intrusion detection program. With the web interface you can easily select, for which network interface you want to use the sniffer. It makes sense to monitor the internal network interface as well. Studies have shown that more attacks come from the internal network. An update of the rule set will make Snort and IPCop very simple. Then you can, as described in the configuration screen, obtain a code update. That you then copy into the "Oink code" field and click Download the New Rule Set. The system then installs the new rule set and uses it in the future. With the free version you can download a file every 15 minutes.

The options of the firewall settings are limited to three areas: port forwarding, external access and firewall options. And that can be configured in the options only to answer whether and at which port the system to a ping. The so-called port forwarding you can forward requests to an external port to another internal. This makes sense, for example, if you achieve multiple internal host via SSH, but the default port for the protocol do not want to change the operating system. An application scenario would be if the computer with IP address 192.168.0.20 to be addressed from the outside to port 16 022 needs. This port IPCop then redirects to the internal port 22 and allows the SSH access. You can allow access only from a specific external IP address. If you are basically a port access to the protected network type, you configure the Remote Access over the sub-category.

The information world is increasingly mobile and VPN access points are an important part of many companies. IPCop means you can remote workers encrypted access to the corporate network, providing for. IPCop has a VPN gateway. The web interface will help greatly in the facility. However, it is of great advantage if you bring background knowledge. You should keep in mind that you open so that a section assembled from outside to inside. As with so many services, applies here: If you do not use, do not turn it active. Need staff access from the outside, it is definitely a very safe method. The creation of certificates, you can easily create the web interface. Similarly IPCop help you choose the proper type. You have the choice between host-to-Net Virtual Private Network (road warrior) or network-to-Net Virtual Private Network.

During installation, you can "drive" or "Flash" to choose. The "Flash" modifies the installation to minimize writes. This measure will extend the life of the flash mass storage. You can also, select Software RAID use to increase reliability. The appearance of the web interface has also changed and has been completely revised. This can be encrypted by default in the future (https) on port address 8443rd As a VPN , you can choose between the future IPsec or OpenVPN. The functions described are possibly only the beginning in the final versions hold 2.0 feed. In any case, we will deploy them in future IPCop. These include for example the medium term, support for more than one network interface per color GREEN, BLUE or ORANGE. For RED is planned only in the longer term. Likewise, the developers want to make out more implement Add-ons to directly. Even updates can take place sooner or later to fully automatic. Administrators currently have the intermediate step of downloading the update file to be accepted.