Comments on: Replacing a Router with IPCop http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/ Musings on technology and life Tue, 06 Jan 2009 06:03:00 +0000 http://wordpress.org/?v=2.7 hourly 1 By: Darrin Chandler http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/comment-page-1/#comment-208 Darrin Chandler Fri, 01 Jun 2007 16:57:36 +0000 http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/#comment-208 "Use as intended" means clicking things in the web interface, pretty much. There are people doing "under the hood" stuff with IPCop to do more complex setups than would be possible by clicking around the provided interface. The advantages of IPCop in that situation are debatable. At that point you're dealing with the complexity of an outdated and customized Linux distro rather than a simple interface. Better to move to a "normal" distro then, or better yet OpenBSD. And, yes, I think it'll do what you need. You've picked something (IPCop) that's designed for the task at hand. :) “Use as intended” means clicking things in the web interface, pretty much.

There are people doing “under the hood” stuff with IPCop to do more complex setups than would be possible by clicking around the provided interface.

The advantages of IPCop in that situation are debatable. At that point you’re dealing with the complexity of an outdated and customized Linux distro rather than a simple interface. Better to move to a “normal” distro then, or better yet OpenBSD.

And, yes, I think it’ll do what you need. You’ve picked something (IPCop) that’s designed for the task at hand. :)

]]> By: Jim http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/comment-page-1/#comment-207 Jim Fri, 01 Jun 2007 13:09:28 +0000 http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/#comment-207 I'm not too sure what all "use it as intended" means, but I suspect I won't be pushing the limits. A little DHCP, take advantage of the DNS cache, and probably some intrusion detection. Nothing fancy. Oh, and I did find a way to incorporate the LinkSys router into the setup: it's my wireless access point. One day if I get really ambitious I'll set up a BLUE interface. For now, the router is hanging off the switch. I’m not too sure what all “use it as intended” means, but I suspect I won’t be pushing the limits. A little DHCP, take advantage of the DNS cache, and probably some intrusion detection. Nothing fancy.

Oh, and I did find a way to incorporate the LinkSys router into the setup: it’s my wireless access point. One day if I get really ambitious I’ll set up a BLUE interface. For now, the router is hanging off the switch.

]]> By: Mick Russell http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/comment-page-1/#comment-206 Mick Russell Fri, 01 Jun 2007 06:45:27 +0000 http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/#comment-206 I agree with Darrin - use IPCop for what it was intended and you can't go wrong. I also use IPCops certificate based VPN capabilty to great effect - 4 sites linked 24/7 no problems. The biggest problem I have encountered is people looking longingly at their old DSL/router and trying to incorporate it in their IPCop setup. I agree with Darrin - use IPCop for what it was intended and you can’t go wrong.

I also use IPCops certificate based VPN capabilty to great effect - 4 sites linked 24/7 no problems.

The biggest problem I have encountered is people looking longingly at their old DSL/router and trying to incorporate it in their IPCop setup.

]]> By: Darrin Chandler http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/comment-page-1/#comment-205 Darrin Chandler Thu, 31 May 2007 17:17:09 +0000 http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/#comment-205 If a wrt54g could handle full bandwidth for days on end reliably, they would have gone even cheaper and slower. Those routers work <strong>great</strong> for their intended use of affordable consumer service, but they aren't up to heavy loads over long periods. That's just engineering in action. Personally, I like OpenBSD as a router platform. On that task, it's hard to beat. But since it's a general purpose OS you'd have to hike up a steeper learning curve to get your firewall in place. There are a lot of people in the local LUG who use IPCop. It should serve you well. If you start getting too tricky you may have some issues, but using it the way it's meant to be used should be cake once you find your way around. This was almost certainly the best choice to get a capable firewall up without already knowing how to build one. If a wrt54g could handle full bandwidth for days on end reliably, they would have gone even cheaper and slower. Those routers work great for their intended use of affordable consumer service, but they aren’t up to heavy loads over long periods. That’s just engineering in action.

Personally, I like OpenBSD as a router platform. On that task, it’s hard to beat. But since it’s a general purpose OS you’d have to hike up a steeper learning curve to get your firewall in place.

There are a lot of people in the local LUG who use IPCop. It should serve you well. If you start getting too tricky you may have some issues, but using it the way it’s meant to be used should be cake once you find your way around. This was almost certainly the best choice to get a capable firewall up without already knowing how to build one.

]]> By: Jim http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/comment-page-1/#comment-204 Jim Thu, 31 May 2007 12:17:23 +0000 http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/#comment-204 No, not using Comcast. RoadRunner here, provided through Time Warner Cable. I've used lots of bandwidth before, and haven't had a problem. No, not using Comcast. RoadRunner here, provided through Time Warner Cable. I’ve used lots of bandwidth before, and haven’t had a problem.

]]> By: Roy Harvey http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/comment-page-1/#comment-202 Roy Harvey Thu, 31 May 2007 11:17:07 +0000 http://blog.mischel.com/2007/05/30/replacing-a-router-with-ipcop/#comment-202 I hope you aren't getting your connection through Comcast. See http://www.gripe2ed.com/scoop/story/2007/4/16/01320/7728 for why. I hope you aren’t getting your connection through Comcast. See http://www.gripe2ed.com/scoop/story/2007/4/16/01320/7728 for why.

]]>