In the situation you describe, I think IPCop would be a waste of a machine.

IPcop is designed to replace your router.  It does routing, and having a 
second router there will GREATLY increase the complexity of your network.

Turning it off or on doesn't really matter, but I'm hard pressed to see the 
value of it to protect just 1 machine.  You could just run a firewall on that 
1 machine.  The real advantage of IPcop is that you can allow much more open 
access behind the firewall between several different machines.  For example, 
I don't worry about having Rsync, SQL, SSH or NFS shares as secured as they 
would need to be if they were connected directly to the internet.  There's 
certainly still some risk with any open port, but it's just so much smaller 
as compared to an unsecured Internet connection.

If you're just curious about what's happening for a day, look at Snort, and 
IPTables.  Both will run on your current machine.

Kev.


On Tuesday 02 November 2004 08:35, Michael Walters wrote:
> Hello All,
>
> I was looking at IP cop pdf, and see that it is intended to be on all the
> time unless there is a power failure and then is set to reboot when the
> power comes on. Is there any point in say, trying it out for a day and
> seeing what attacks on the network are reaching the red zone? I do not want
> to have any of my computers permanently running 24 hours a day because
> electricity is expensive.
>
> Do I need a firewall like IP cop between my desk top computer and the
> Internet when I usually shut my computer down right after I use it, and
> rarely have my computer on for more than four hours at a time? Indeed, most
> of the time I have my computer on for an hour or less a day.
>
> I am connected to the net through a four port router to an adsl modem.
> Again, do I really need to use a firewall like IP cop, and is there any
> point in trying it out?
>
> If  any of you think it would be well worth while to try out IP Cop, I
> would take my firewall, a key board, and my firewall monitor to an install
> fest, (and the IP Cop CD of course). However I would need a ride, and I
> would like to follow the instructions myself at my own pace so that I
> understand them. When I watched the installation of IP Cop a couple of
> times at a couple of other install fests the process went by too fast for
> me to absorb.
>
> Regards,
>
> Michael Walters
>
> _______________________________________________
> clug-talk mailing list
> [EMAIL PROTECTED]
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
> **Please remove these lines when replying

_______________________________________________
clug-talk mailing list
[EMAIL PROTECTED]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying

Reply via email to