From Campworld

Linux: Linux Firewall with IPCop and OpenVPN

History / Status

Introduction

Well I am upgrading or migrating my firwall to a new machine. I've used Mandrake Multi Network Firewall for a few years. But I wanted more features than the software offers. The two new features I was looking for were a network zone for my wireless network and road worrier vpn access.

I settled on IPCOP. IPCOP gave me the following features:
- a blue interface for my wireless network
- addon software mechinism
- openVPN addon

Firewall Configuration

My firewall is being configured as follows:

 
Internet (RED)----------[FIREWALL]----------(GREEN) local LAN
                               \  \ 
                                \  \--------(ORANGE) servers on the internet
                                 \ 
                                  \---------(BLUE) wireless network

Wireless and travelling security

I grouped wireless and travelling security into one group. No matter wheather at home or on the road I wanted my laptops to use one security scheme. I am also not a big fan of all the different wireless security methods.

I decided to use VPNs to meet my security needs. I finally settled on OpenVPN. This software runs on all platforms. It uses SSL and UDP to transfer packets. It is not blocked by public hotspots in most cases.

Installing IPCOP

To install IPCOP follow the instructions on the IPCOP website. Or install the CD and go.

Installing the openVPN addon

Changes to IPCop's Client Config Files

Well the OpenVPN addon for IPCop didn't provide the client files with the option I needed. First, all traffic didn't route through the vpn. Second the config file didn't work for both at home and when I'm away.

Conclusion

So far I'm happy with the setup. The VPNs work great.

Links

IPCOP - http://www.ipcop.org
OpenVPN IPCOP addon - http://home.arcor.de/u.altinkaynak/openvpn.html
OpenVPN - http://www.openvpn.net

Retrieved from http://www.campworld.net/thewiki/pmwiki.php/Linux/FirewallIPCOP
Page last modified on October 06, 2006, at 02:41 PM