Firewall Distribution

max12590 · 05-02-2008, 01:32 AM

Ok, I am trying to sort out which Linux firewall distribution will best suit my needs. At the moment I have a Smoothwall, which works pretty well for me. My biggest problem with it is the lack of a built in client-server VPN solution (at least as far as I can tell).

My biggest priorities are ease of setup and administration (I like to think of myself as being pretty good with computers, but hey, when is ease of setup a bad thing?), robust VPN capabilities (I assume I will be using IPSec or OpenVPN), and general variety of features. I want the variety of features to keep me occupied. I want to be able to set this thing up in a matter of an hour or two for basic functionality but, after initial setup a nice array of stuff to mess with would be nice. I like to play with features and try to implement new things. I also wouldn't mind being able to get into a web-administration page remotely via HTTPS, as SSH can be cumbersome.

From what I have gathered I think I should be looking in the direction of IPCop of psSense. Untangle looks like it is way too dumbed down for me to have very much fun with it. I guess the main thing I want to know is the difference between setups in IPCop and pfSense.

Anti-Trend · 05-02-2008, 05:46 PM

IPCop is based on Linux (2.4), and pfSense is FreeBSD-based. IPCop has robust VPN capabilities, designed for both road-warrior and net-to-net VPN scenarios, even with dynamic IPs on both ends. pfSense supports a lot of advanced features like stateful failover and RADIUS authentication. IPCop can handle a little more throughput on the same hardware, and it has a great plugin system. pfSense enjoys a wider range of features out of the box, and has a very active community. So, both are very good and worthy of even very large networks. Either will be far more than adequate for home networks.

One minor thing to note is that if you're using older hardware, look carefully at the minimum specs for both. IPCop requires at least a 486 with 24mb RAM, while pfSense requires at least a Pentium MMX with 128mb RAM. On fairly modern hardware they will perform very much alike; on older hardware (like that which I'm using for my firewall), pfSense will be noticeably slower than IPCop.

max12590 · 06-02-2008, 12:14 AM

Ok, well, if I were to say that roadwarrior VPN with a dynamic DNS on one end was my primary concern would you tell me to use IPCop? Also, hardware is no issue for me, I have a nearly unlimited supply of P4's with 512 MB RAM.

Anti-Trend · 07-02-2008, 05:33 AM

Quote:

Originally Posted by max12590

Ok, well, if I were to say that roadwarrior VPN with a dynamic DNS on one end was my primary concern would you tell me to use IPCop? Also, hardware is no issue for me, I have a nearly unlimited supply of P4's with 512 MB RAM.

If your router will use a dynamic IP, IPCop has special provisions that will make it feasible. Otherwise, both are a good choice. Play around with them and see which you like better.

max12590 · 08-02-2008, 05:01 AM

Ok, sounds good. I will most likely implement IPCop on the network this weekend.

05-02-2008, 01:32 AM	#1 (permalink) Top
max12590 Masterful Geek Join Date: Nov 2004 Age: 17 Male Posts: 1,016 Times Helpful: 76 Status: Offline My Computer	Firewall Distribution Ok, I am trying to sort out which Linux firewall distribution will best suit my needs. At the moment I have a Smoothwall, which works pretty well for me. My biggest problem with it is the lack of a built in client-server VPN solution (at least as far as I can tell). My biggest priorities are ease of setup and administration (I like to think of myself as being pretty good with computers, but hey, when is ease of setup a bad thing?), robust VPN capabilities (I assume I will be using IPSec or OpenVPN), and general variety of features. I want the variety of features to keep me occupied. I want to be able to set this thing up in a matter of an hour or two for basic functionality but, after initial setup a nice array of stuff to mess with would be nice. I like to play with features and try to implement new things. I also wouldn't mind being able to get into a web-administration page remotely via HTTPS, as SSH can be cumbersome. From what I have gathered I think I should be looking in the direction of IPCop of psSense. Untangle looks like it is way too dumbed down for me to have very much fun with it. I guess the main thing I want to know is the difference between setups in IPCop and pfSense. __________________ In the words of a certain Battlefield 2 commander, "They're spawnin' like crazy at the Gas Station and then tryin' to Forrest Gump it down the Interstate."

05-02-2008, 05:46 PM	#2 (permalink) Top
Anti-Trend Nonconformist Geek Join Date: Oct 2003 Age: 27 Male Posts: 4,884 Times Helpful: 538 Status: Offline My Computer	IPCop is based on Linux (2.4), and pfSense is FreeBSD-based. IPCop has robust VPN capabilities, designed for both road-warrior and net-to-net VPN scenarios, even with dynamic IPs on both ends. pfSense supports a lot of advanced features like stateful failover and RADIUS authentication. IPCop can handle a little more throughput on the same hardware, and it has a great plugin system. pfSense enjoys a wider range of features out of the box, and has a very active community. So, both are very good and worthy of even very large networks. Either will be far more than adequate for home networks. One minor thing to note is that if you're using older hardware, look carefully at the minimum specs for both. IPCop requires at least a 486 with 24mb RAM, while pfSense requires at least a Pentium MMX with 128mb RAM. On fairly modern hardware they will perform very much alike; on older hardware (like that which I'm using for my firewall), pfSense will be noticeably slower than IPCop. __________________ See My Desktop \| Try Linux \| Install Linux \| Visit My Server \| Support Hardware Forums \| Easily rip DVDs in Linux \| Remember Everything

06-02-2008, 12:14 AM	#3 (permalink) Top
max12590 Masterful Geek Join Date: Nov 2004 Age: 17 Male Posts: 1,016 Times Helpful: 76 Status: Offline My Computer	Ok, well, if I were to say that roadwarrior VPN with a dynamic DNS on one end was my primary concern would you tell me to use IPCop? Also, hardware is no issue for me, I have a nearly unlimited supply of P4's with 512 MB RAM. __________________ In the words of a certain Battlefield 2 commander, "They're spawnin' like crazy at the Gas Station and then tryin' to Forrest Gump it down the Interstate."

08-02-2008, 05:01 AM	#5 (permalink) Top
max12590 Masterful Geek Join Date: Nov 2004 Age: 17 Male Posts: 1,016 Times Helpful: 76 Status: Offline My Computer	Ok, sounds good. I will most likely implement IPCop on the network this weekend. __________________ In the words of a certain Battlefield 2 commander, "They're spawnin' like crazy at the Gas Station and then tryin' to Forrest Gump it down the Interstate."

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Distribution Release: SLAX 5.1.5	megamaced	Linux and Other OSes	0	22-05-2006 10:52 AM
The Ultimate USB Pendrive Distribution!	megamaced	Linux and Other OSes	37	19-05-2006 06:19 AM
Video Card, Dual Display and video distribution	kaveri	Video Cards, Displays and TV Tuners	0	30-03-2006 11:02 PM
Ubuntu voted 'Linux distribution of the year'	megamaced	Linux and Other OSes	13	12-03-2006 04:48 PM
Valve and EA Announce Distribution Agreement	syngod	News and Article Comments	3	19-07-2005 12:11 AM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)