[KLUG Members] the NEW IPCop 1.3.0 - available from KLUG!

Bruce Smith members@kalamazoolinux.org
22 Apr 2003 10:23:19 -0400


> > 	Linux 2.4 kernel and iptables 
> ....
> > 		Support for PPTP (GRE)
> 
> Cool!
> 
> Does IpCop support CIPE VPNs?

I don't see it listed.

> I'd like to find a firewall/distro that supports IPSec, PPTP, and CIPE
> VPNs for the corporate wireless 'net so people can use whatever they
> want.

So would I, that's why I've been talking to the Devil Linux developers,
and I convinced them to add CIPE to their distro in a future release.
(they didn't say exactly when, and I didn't press the issue)
I _might_ try adding it manually myself in the mean time.

Personally I prefer Devil Linux over IPCop because it's boots and run
off CD - no hard drive required.  (config changes are saved to floppy)
This eliminates one major point of failure on a PC, and saves energy by
not having to spin a HDD all the time.  Not to mention it's harder for a
cracker to install a root kit on a read-only CD drive, and a write
protected floppy.  :-)

However, Devil Linux is NOT for a newbie!  You get a base system, with
nothing configured, and there is NO fancy GUI to configure anything. 
You have to SSH in and manually create config files, many from scratch.
i.e.  The firewall rules file is completely empty, you have to write
your iptables from scratch.  (I "borrowed" mine from floppyfw :)

Once these guys get a high level config interface, they are going to
give the hard drive based firewall distros some real competition (IMO).

Nice for novices:  http://www.ipcop.org/
Great for Gurus!:  http://www.devil-linux.org/

--------------------------------------------
Bruce Smith                bruce@armintl.com
System Administrator / Network Administrator
Armstrong International, Inc.
Three Rivers, Michigan  49093  USA
http://www.armstrong-intl.com/
--------------------------------------------