[Leaplist] A "STOPPED" IPCop Computer
Randall Perry
randallp at domain-logic.com
Wed Jan 7 18:04:12 EST 2009
On Wed, Jan 7, 2009 at 3:12 PM, William Holmes Ferguson
<williamhf at cfl.rr.com> wrote:
> Thank you very much, Mr. Perry.
You are very welcome.
I haven't been active on this list for over 2 years.
'bought time to come back.
The list issues this past week got me back in on things.
> Your welcome clarification mentioned a couple items I don't understand.
>
> I don't understand the phrase "statefull inspection firewall."
> This is not criticism coming from me.
> Maybe a typo? Maybe "stable inspection firewall" intended?
stateful packet inspection (also just referred to as SPI) is a
firewall that keep track of connections going in and out.
stateless firewalls is why you had to use passive FTP to traverse
through those gateways.
The real strength of the IPcop firewall is the iptables that manages
the packet filtering portion of the firewall.
It defines what is allowed in (and from where specifically) and what
is allowed out (egress filtering).
There are many benefits to running IPCop (performance, security,
ease-of-use) and those can be expanded upon by using addons.
Like the Internet filtering addon to screen out unwanted websites you
do not wish to visit.
(you can also use the PeerGuardian lists to block any traffic to
corporations or agencies you do not wish to communicate with on ANY
level).
>
> I don't understand what a "webmin interface" is.
Many times I refer to webmin interface when dealing with a Linux box
that uses perl on the backend (just like the web-based interface
called webmin I use to use to manage my initial Linux servers).
> As you see, I'm walking on very unfamiliar ground here.
<snip>
> I think that you are teaching me that tho' both the "Red" and the "Green"
> NIC's of
> my IPCop Computer were "STOPPED" when I checked System Status, but they
> aren't
> "STOPPED" when the IPCop Computer is properly connected in my two-person
> home LAN.
I don't recall the graphical interface.
I usually just ssh in and use ifconfig to check the state of the
ethernet interfaces.
The real IPCop expert is Phil.
Phil was part of the initiative that forked smoothwall over into the
more wonderful IPcop project.
But I don't want to dig up ancient history ;)
--
--
Randall Perry
www.domain-logic.com
574.612.5893
Firearms are second only to the Constitution in importance; they are
the peoples' liberty's teeth.
~George Washington
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the Leaplist
mailing list