Overview of IPFire
IPFire is a powerful and professional Open Source firewall solution. IPFire is a Linux distribution that focuses on easy setup, good handling and high level of security. It is operated via an intuitive web-based interface which offers many configuration options for beginning and experienced system administrators. It is mainly focused on flexibility and scalability, oriented towards small and medium level business networking. For this reason it is possible to install many addons with a simple click. This is what makes ipfire a solution unlike any other: it’s easy to set up and easy to administer. IPFire is maintained by developers who are concerned about security and who update the product regularly to keep it secure. IPFire ships with a custom package manager called Pakfire and the system can be expanded with various add-ons.
Features
- Security: The primary objective of IPFire is security. Its easy to configure firewall engine and Intrusion Detection System prevent any attackers from breaking into your network. In the default configuration, the network is split into various zones with different security policies such as a LAN and DMZ to manage risks inside the network and have custom configuration for the specific needs of each segment of the network.
- Firewall: IPFire employs a Stateful Packet Inspection (SPI) firewall, which is built on top of Netfilter, the Linux packet filtering framework. It filters packets fast and achieves throughputs of up to multiple tens of Gigabit per second.
- Intrusion Detection/Prevention System: IPFire’s Intrusion Detection System (IDS) analyzes network traffic and tries to detect exploits, leaking data and any other suspicious activity. Upon detection, alerts are raised and the attacker is immediately blocked.
- Virtual Private Networks (VPNs): connect remote locations like data centers, branch offices or outsourced infrastructure via an encrypted link. IPFire allows staff to work remotely as if they would be sitting in the office and allowing them to access all resources that they need – fast and securely. IPFire supports industry standards like IPsec and OpenVPN and interoperates with equipment from various vendors like Cisco & Juniper. VPNs are quickly and easily set up with IPFire and employ latest cryptography.
- Add-ons: From a technical point of view, IPFire is a minimalistic, hardened operating system. To provide more functionality, it can be extended by add-ons which are installed with IPFire’s own package management system called Pakfire.
- Quality of Service (QoS): The IPFire QoS categorizes network traffic and sends it out prioritized by how important it is to ensure a good service. For example, a Voice-over-IP call will always have priority over a large download to ensure that words will never get lost and call quality is always the best it can be.
- Web Proxy: One of the most commonly used features of IPFire is the full-fledged web proxy. It delivers and filters web content and can only allow Internet access for some users. Caching content on the firewalls disk makes websites load faster. External regularly updated blacklists allow banning browsing on various websites when they are for example not suitable for students. Optionally, the IPFire web proxy can transparently scan for viruses and block them straight away.
Tutorial Download & Instalasi IPFire di Platform perangkat IDNetWALL
- Download IPFire disini. Versi yang diinstall adalah IPFire 2.25 – Core Update 153.
- Download aplikasi Rufus untuk create bootable USB versi portable disini.
- Create bootable Software IPFire ke flashdisk menggunakan aplikasi Rufus dengan langkah-langkah berikut:
- Verifikasi BIOS mode adalah: UEFI and Legacy
- Pastikan perangkat dalam keadaan Power-Off.
- Koneksikan perangkat ke Monitor.
- Koneksikan perangkat dengan USB Keyboard.
- Power-On perangkat. Saat awal perangkat Power-On, tekan tombol “DEL” secara berulang-ulang untuk masuk ke BIOS.
- Jika sudah masuk ke BIOS, maka Anda perlu memastikan BIOS mode di Menu “Advanced > CSM Configuration > Boot option filter“. Pilih UEFI and Legacy.
- Save Changes and Exit.
- Koneksikan bootable Flashdisk Software IPFire ke port USB perangkat.
- Power-On perangkat. Saat Awal booting perangkat, tekan “F11” untuk masuk ke opsi Boot BIOS. Kemudian pilih “FlashDisk-Name”.
- Install IPFire 2.25 – Core 152.
- Language Selection > English > OK
- Start installation
- License Agreement > I access this license > OK.
- Disk Setup > Delete all data.
- Filesystem Selection > XFS Filesystem > OK.
- Installing the system…
- Reboot
- GRUB > *IPFire 2.25 (x86_64) – core152 GNU/Linux. Auto running.
- Keyboard mapping > us > OK
- Timezone > Asia/Jakarta.
- Hostname > OK.
- Domain name > OK.
- Enter the ‘root’ user password > OK.
- Enter the ‘admin’ user password > OK.
- Pada percobaan instalasi, kami mengkoneksikan perangkat dengan 2 kabel LAN.
- LAN 1 > sebagai RED (External) connection
- LAN 2 > sebagai GREEN (Internal) connection
- Untuk penjelasan lebih detail mengenai setting zoning IPFire, bisa dipelajari di link ini.
- Network configuration type > OK.
- GREEN + RED > OK.
- Drivers and card assigments > OK.
- GREEN > Port “LAN 1”.
- RED > Port “LAN 2”.
- Address settings > OK.
- GREEN > OK. Input IP Address & Network Mask > OK.
- RED > OK. Static | DHCP | PPP DIALUP > OK.
- Gateway Setting > OK.
- Done
- DHCP server configuration > Enable (Input Data) > OK.
- Setup is complete > OK.
- Booting.
- Login terminal shell. Input username: “root” dan password: adalah password yang Anda set selama initial setup.
- Console Web Admin via IP LAN: https://192.168.23.100:444.
- Input username: “admin” dan password: adalah password yang Anda set selama initial setup.
- Dashboard. Pada tahap ini, instalasi dan initial config software IPFire telah selesai dilakukan.