i just got ipcop up and running minuates ago and made little changes to the log and to enable intrusion dectction system . i would like to know if ipcop is "secure " out of the box and almost requires no further configuration after install.

thankyou,

slipaway172

I've not used IPCops before but this just my personal suggetion

No distro is safe and secure out of the box. it requires atleast some minimal level of fine tunes to meet your environment.

If you go to one of these sites that tests your firewall,
http://www.dslreports.com/scan
( for example )
you will find that IP-Cop defaults to opening port 113, but not to your LAN, but to itself for some strange reason. It can be turned off by going to the Firewall tab, external access tab and unchecking the tick under "action". See page 41-42 of the Admin guide for further details.

I am currently using IP-Cop but it doesn't allow total stealth as it replies to pings, this requires some editing of the firewall files.
Smoothwall however had a facility to do this from the gui, and in some ways I think I may change back.

floppy

says that icmp is accepted, but under my modem, router(ipcop) and windows xp firewall i do have icmp BLOCKED

NM. after running the test from hackerwatch.com and it found that icmp and EVERYthing was blocked. like sygate and a few others were reporting port 8 was open but it wasent. THANKYOU VERY MUCH. THANKYOU THANKYOU, ( iwas very skeptial of ipcop then but now im satisifed)!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!