IPFire, Parents Friend to Control Internet Access

Posted by Made Sudiartono on Aug 15, 2010 in Blackberry Apps, Features News, Wallpapers | 2 comments

IPFire, Parents Friend to Control Internet Access
Internet today has become a necessity for all societies. From students, teachers, entrepreneurs, employees until the gardener could not be separated from internet connection. Starting from a fad to that consistent with its business. We are in great need Internet, but remember also must use it wisely. Internet usage is vulgar for children is very influential in the growth and develop psychologically. For those who’ve grown up, use of internet at the wrong time, for example during working hours / hours of study will also be impacted less good.

Internet access settings aim to control access to the internet:

  1. Can not access sites adult sites by children and adolescents or the sites of friends who spent a lot of bandwidth and time.
  2. Accessing the Internet with the wise, both time and place. Not done during working hours or while studying.
  3. Ordering and stabilization of the right bandwidth to all users get access to the same scale. Bandwidth usage is balanced between browsing with downloads.
  4. authorization on a computer that has the right based on the MAC ADDRESS (physical address)
Ordering all of the above requires software called IPfire. This software was greatly interested by the administrator. techniques other than the easy setting, feature – a feature in it is very helpful for managing Internet traffic data.
IPFIRE

IPFIRE

Features include :

Firewall Functions

The main focus of the IPFire distribution is being a firewall. It splits the network into several parts and allows only operations that are allowed by policy.
  1. Stateful inspection firewall based on linux netfilter architecture.
  2. Intrusion detection system with Guardian addon as extension (IPS system).
  3. Filter for invalid/non-standard packages.
  4. Separate network segments for server (DMZ) and wireless with custom policies.
  5. DoS attack protection.
  6. Application proxies for HTTP and FTP (with access control and content filtering) and DNS.
  7. Incoming and outgoing packet filtering with user grouping.
  8. Quality of Service and traffic shaping.
IP FIRE Screenshoot

IP FIRE Screenshoot

Essential networking services

IPFire covers essential functions that are needed on every network as well.

  1. DHCP server
  2. Dynamic DNS service
  3. NTP server
  4. DNS proxy

HTTP Proxy

The web proxy service allows to filter and log user activities and is able to block malicious content.
  1. Caching of web content.
  2. Content filtering based on blocking lists and manually defined lists for blocking malicious content.
  3. Time based disabling of access for individual users or entire groups.
  4. Simplified management for classes or conference rooms.
  5. Advanced storage of updates for Microsoft Windows, Symantec Antivirus, Adobe products, Avira Antivir and Avast Antivirus.
  6. Authentication to LDAP, identd, radius or Windows server or a local user database.
  7. Transfer limitation (speed and/or traffic volume).

Virtual Private Networking

Virtual private networks (VPNs) are used to securely communicate with a customer or partner. For a maximum of interoperability, IPFire comes with multiple implementations.
  • IPSec/Strongswan
    1. Network-to-network or network-to-host (roadwarrior)
    2. IKE – PreSharedKey or
    3. X.509 certificates from an integrated or external CA
    4. Tunnel reconnection on disconnection and dead-peer-detection
    5. NAT traversal
    6. Encryption with AES, 3DES, Blowfish, Serpent and Twofish
    7. HMAC: SHA1, SHA256, SHA384, SHA512
    8. Real time compression
  • OpenVPN
    1. Host-to-network (roadwarrior)
    2. SSL-based encryption: AES, Blowfish, Twofish, 3DES, …
    3. Real time compression
    4. Automatically generated packages for clients so that there configuration is more simplified
    5. Tunnel across multiple NAT
  • PPTP passthrough

Supported Connection Types

IPFire is able to access the internet by lots of common connection types.

  1. Ethernet links with static ip address or configured via DHCP configured
  2. ADSL/SDSL with PPPoE
  3. DSL via PPTP
  4. VDSL (a product of Deutsche Telekom)
  5. UMTS
  6. Automatic reconnect after disconnection by the provider
  7. reconnect with time based schedule

Configuration

All of the functionality provides by IPFire is configureable with a simple web management interface.

  1. SSL-encrypted web interface
  2. SSH access

Monitoring

The webinterfaces gives easy access to graphical summaries of logs that let the administrator recognize any issue easily.

  1. Graphical monitoring of the system with the web interface
  2. Accessible log files with automatic summary of key events
  3. Export function of log files (individually or as a full backup)
Tag post:ipfire,download guardian for ipfire,ipfire dmz,ipfire external proxy,ipfire review 2011

2 comments

  1. Alberto Pepler
    September 2, 2011

    Hi
    I am investigating IPFire for a client to stop access to certain web sites. I am just not able to configure the blocking of sites. Will you please assist.
    Thanks
    Alberto Pepler

  2. Santiago Znidarsic
    November 30, 2011

    Do you have a problem with spambots spamming your blog with comments? Click http://bit.ly/syR2js for the solution.

Leave a Reply