Hi,
I'm currently running a server at home with Fedora, and I think i've decided to move to Centos to save on the updates (and try something new, but not too different).
Whilst I make the move (also to a different machine to make things a little easier), I'd like some advice or direction on the following idea:
I'm fairly familiar with using an old PC set up running IPCOP, it works great, just an in/out network setup. My thoughts are, could I consolidate the functionality provided by the IPCOP machine onto the Centos machine??
So, the machine i'm, going to load my new CENTOS setup onto has 2 network interfaces, currently one will be spare. Rather than having the spare, can I connect it to the modem and make the CENTOS machine provide IPCOP-like service to the other network interface facing the internal home network? I've tried to illustrate this with the attached pic incase this is unclear - the proposed change in red.
Features I like in IPCOP - traffic shaping, spamassasin, dhcp, firewall, vpn, snort, the web interface.
Any cons on security for a server doubling up to do this?
Thanks in advance!
Cheers,
Phil.
ee-question.jpg
@author : ipcop is designed to work as Firewalll, its not like normal OS, ipcop cant be installed on top of any linux server, it has be dedicated.,
to get this kid of service in Centos
traffic shaping, : yes but you need Thirparty software
spamassasin, yes, again you need to install spamassasin software by your self
dhcp,: yes, download dhcp server
firewall, : use iptables, but if you need robust firewall, then you need to implement some third party software, or you will have to write robust iptables rules which is quite impossible , you have to iptables expert for that.
vpn, : yes, install open vpn
snort, : install this software by your self
the web interface. : install webmin you wiil get nice server admin web interface
remember : purpose of ipcop and Centos is totaly different. ipcop is to desing to work a firewall
if you have security conecern i would of say, keep ipcop as its,
install vmware in Centos, and then install as many as OS you want in centos ( as long as you have enough ram)