Ipcop Management Part2

IPCop

( IPCop ( )*(

)+

2)

&

"

!" & !)+

#

$

, -# .!" ./ . .

# 0 ' " 0 /$ SSH * WinSCP $ & IPCop , * $ * & IPCop & # (0 & # % & ' IPCop )

*

*

%& # &

& / .$ #* (# # . 0 !Remote ! Config , * Browser 4 Interface

0 '

'

&

. http://ipcop:81 * http://xxx.xxx.xxx.xxx:81 IPCop . ' $1 * 2 % )* ) ./ .* 2 - System $1 0 %* & 2 IPCop - Status $1 0 0 . . 0! 2 service $3 )+ * Network Traffic 4 4 - Network )+0% * % * & + 2 + ADSL, Dial-UP, PPP 4 4 - Services $1 0 )+0% * % * & )* # 2 + Proxy, DHCP, NTP 4 4 - Firewall $1 0 )+0% * *# Firewall Forward Port 2 - VPNs $1 ) 0 )* # VPN ( Virtual Private Network ) - Logs ) 0 Logs 2 0 ' * (# " ) '$ ( Addons Copfilter ) Addons (# $ " !" 5 .* System Web Page ) 0 System ... $ &

* connect * . Update * 0 ! +& IPCop Patch ( )* * / . $67 Refresh update list ! Update IPCop 0 )* * / . 0 !/* & & . Upload $)* IPCop ( Update & $' 3 Home

$1 *

$3

0

Passwords

) *

0

SSH Access

!

Remote

Access Remote

! ' 0!

! $ . password

&

admin

IPCop , /$

Dial

SSH

0 ! Remote ( network 5 .) 5. config (# # External Access "

*

2

&

$' 4

enable SSH

& ! !"

$

GUI Settings *

$1

0 ,

IPCop + 5 8 )+ *

$3 -$3 Java script

Backup

) 0

$1 0

$1 2 0 & -Backup to Floppy 0 ! % / .& # $67 Backup to Floppy )0 , disk floppy drive + # error & -Backup to file & backup ' Hard disk * Externel HDD * USB Drive 2 / . 0 ! Mount USB Drive * & IPCop # backup / .& # $67 Create a new backup set backup

'

IPCop / .0

!

Shutdown

) *

0

!

0 Shutdown * 0 Restart IPCop Shutdown * Reboot %*

*

Status Web Page

$1 -System Status -Network Status -System Graphs -Traffic Graphs -Proxy Graphs -Connections 0 . System Status Services: 0 0!

. 2 IPCop $9 6 $9 6 IPCop $3 )* #

)+ .' . $1 .'

)* IPCop %

Memory: 0

)+

Disk Usage: 0

Memory / Swap File

)+

Hard Disk

Uptime and Users: 0

Loaded Modules: 0

Kernel Version: 0

IPCop

)+

Modules

.

.

*

*

User login

!' )+/ . Kernel

Kernel )+

Network Status 0 0 $ Interface: 0

.

.

: network . $1 6 Network Cards .')

.

Current dynamic Leases: 0

)+

DHCP Server .

*

.6

0

.

. .

. .

; : /var/state/dhcp/dhcp.leases ! $3 IP Address !' )+$9 6 0 + & )+

)+

Routing Table Entries : 0

ARP Table Entries : 0

Routing

ARP Table

System Graphs 0

.

)+ CPU, Memory, Swap, Disk / . 0 $1 .$= / .0 !& # ;( ' . .

.0$ *: .

Traffic Graphs 0

.

.

Traffic ,

Interface Red, Green, Bule, Orange

.

0

'$ ( 0

.$=

Proxy Graphs 0

.

.

)+

!0

IPCop Server / . 0

–

!& #

;0

Proxy Server )* #

.

. . $1

. $1 .

.0$ *:

Connections

0

!

0

0

+

$. $ .

/ .0 ( :

( &: $ .

( )*

.

Network Web Pages Dialup $1 %*

$6 >: )+

#

:

)+)

> )+ Interface Red $1 /

* Dialup &

% * ) Profiles &

)+ * Driver Idle Time )+ Reconnection : 6 #- + & Manual, Persistent, Dial on Demand ) > # &:0% 0 ! 6 Profile * " % * ) In case reconnection fails,switch to profile # &: 0% Authentication : $1 % * & )+* 6 $. ISP / . & )0& User name, Password, Method, Script name (0 0 ! 6 ) DNS : % * & DNS / .0 ! % * & Automatic Manual Upload ) 0 $1 ( : : firmware ) 6$ >: 2 .') IPCop / .0 ! $6 >: )+ /* # &: .' % Upload )* IPCop + # Connection :

6/

Modem &

Aliases )

%* &

>

Modem " $

IP * .2 IP

)+&' Port Forwarding ) 0

Service Web Page 0% * Proxy 0% *

%*

&

0

. Speaker, Tone

! %*

&

Server )* #

Firewall "

$3 )* # Proxy ) Transparent on Green : $1 & )* & ' / . & ' Enable on Blue : 0% * $3 )* # Proxy ) Transparent on Blue : $1 & )* & ' & .5 . / .

2

$ ( $3 )* #

)* # Service 2 $3 )* # Proxy Server / . 0

Web Proxy Enable on Green : 0% *

2

& . . & .)

( 5.

/.

2&

. Green Interface $0' &

Proxy

.5 .

. Blue Interface Blue

&

'

Proxy

.

$0'

6)* IPCop Log ) )+ Proxy & ' . Upstream proxy (host : port) : ) > & Proxy & .' )* IPCop 0 , $)* Proxy Server & Upstream Username : 6 User Proxy Server )+ Upstream Password : 6 Password 6 port Proxy Server )* # (! $1 IPCop Default Port: 800 ) Proxy Port : Log Enable :

Cache Management 0% *

%*

( )

)* Proxy

Cache

cache Transfer Limits &

%*

' )*? 06 . )*,

–

DHCP Server

DHCP : $1 0

% * )* IPCop $3 # DHCP Server / . . $1 Green Blue Start address & ( # )* End address & (06 . )* Default lease time (mins) )* ()+ Max lease time (mins) 06 )* ()+ Domain name suffix & %* + ./@0 : Allow bootp clients % * )* ' . bootp Primary DNS Secondary DNS % * & DNS Server )* ' . Primary NTP Server Secondary NTP Server % * ( & %* )* ' . Primary WINS Server Secondary WINS Server % * & WINS Server

Additional DHCP Options 0% *

Current fixed leases )

( $1

)* IPCop

% * & (# # A)*

DHCP Server

> . fix ()* & !" ( fix )* ' .

Current dynamic leases 0

.

(

)* &

'

'

.

. 0

! %*

0

Dynamic DNS )

0

! . )+

>

IP

#

0

! $3 )+

) 0

Dynamic DNS ( )* Server

Internet

Setting : The classical RED IP used by IPCop during connection $1 &

#

" '

.

)+* .

IP

$ .

Guess the real public IP with help of an external server )*

.5 .

'

.0

* .

RED

& IP

DNS

! #

Minimize updates; before an update, compares the dns IP for hostname “[host.]domain” against RED IP

)+

0 + /@0 : . +/ Add a host : 0 % + /@0 : $ (# ) 2) . Services $1 ,')* # Hostname $1 + /@0 : " Behind a proxy $1 6 & .'* Proxy Domain $1 6+ / . Enable wildcards $1 . + * * Username Password % * ,')+ *0, Enable $1 %* 6? ( )0+ /@0

Services / .

. ) ,')* #

6

&

Edit Hosts $1

% * + /@0 :)* & ) & Add a hosts : (# + /@0 :) & .

. "&

( /@0 : (# Hostname + /@0 : (# Domain name / . IPCop Enable #B !' ( )+ Current hosts : 0 .+ /@0 : .'$9 6

%*

,

&

IPCop

Host IP address

Time Server & 0

% * )+

& /

Network Time Server

Use a Network Time Server :/ .0 Network Time Server ) 0

)*)0&

"

! $3 )+

Primary NTP Server

)+ # Provide time to local network ( )* & Update the time :)+0% * ( )* Update / #* %* NTP Server

/.

Obtain time from a Secondary NTP Server

& Default $1 pool.ntp.org !' $1 NTP Server & . & 2 / .0 !)* Update

Traffic Shaping *

$1

+

%

Setting : #B !' ( $3 )+

) 0 )+)

&

)+

&

.

Service

%*

# 0' 06 0

Traffic Shaping Uplink speed )+0% *

Downlink speed

' 0% &?

Upload / Download

Add service : 0% *

0% & )

%*

& (6 :

Medium, Low

* . $1 kbit/sec Service 2 / .

& High,

3

Service

%*

0 packet

(" $ 0 &:

Protocal

Enabled ( $3 )+ Traffic shaping service : 0 Intrusion Detection & 0

)+ $3 )+

.

/ .&

Service

Snort 0% * )+

Intrusion Detection System : 0% * Snort rules update : 0% *

.

)*

0

packet

Interface *

Update & VRT (Vulnerability Realtime Team)

Oink Code

.

www.snort.org

snort

!

Firewall Web Pages 0% *

'$ 0

%*

, &

IPCop

$' 0 Traffic Flow !C" 8 * Packet '

IPCop

Port Forwarding : )+0% *

)

)+

Forward port )*

&

# , IPCop Server

2 .') &

(# rule )* / . Protocal 6 Protocal )+ Alias IP ! (# ) 0 Network\Aliases $1 IP IPCop Red Sorce port 6 port Destination IP 6 IP & forward $ Destination port 6 port $ . Current rules 0 . Forward Port

.

Add a new rule 0% *

)*

default

External Access : 0% *

% * )* &

)

!

. DMZ Pinholes : $1 0 )

5.

)+

&

)+

Remote

IPCop

&

IPCop

5.

) 0

+ * & . Blue / . $3 ( port Blue Access : )+ % * & )

%*

!"

&

*

&

. Green * & )*, $Blue )* & *

.

. Orange )+

) &

Green

.

$3 )+

/ .0

!

Firewall Options : $1

VPNs Web Pages &

) 0 0#

6 $1 MAC Address . %* )* Ping *

% * )*)+ & VPN

& $

. VPN (Virtual Private Network) & D. * )*( 2

Addons

2&

Logs Web Page & 0

)+ % * & logs 2 Log setting : & 0 %* . .

Log summary :

0

.

. / .

0

IPCop Log

2

.

.

)+

2

Packet

0 , IPCop

2

Proxy logs : 0 IP

)+

. )+

web site

Firewall logs : 0 !"

/ .0

Internet ,

( 2

Proxy Server / .

0

.

.

$1

)+

. )+

. )+

Chain, Protocal )+ Port

,

IPCop

$ . Intrusion Detection System logs : 0 !" Packet $ $ )* # $9?*0

. )+ * Packet

(# > $1 (# C8

System log : 0

.

IPCop (Default) RED 0 DNS

0 SSH 0 NTP 0 Cron 0 Login-Logout 0 Kernel 0 IPSec 0 Update transcript 0 Snort 0

DHCP Server

2

Logs

log

dnsmasq

, +

# "

* 6 log

" log Log

)+

DHCPServer

)& Remote )+ , SSH * * 6 >: NTP Server >: % # / . Cron tab )& )+ " * 6 >: # % Kernel IPCop Server * 6 >: IPSec 2 IPCop Update patch IPCop Snort

# www.ipcop.org Kritsada P. (Bugfly)