Hello Security Gurus

I am a home user and would like some filtering for the Internet content that enters my network. I am thinking of a Squid/Dans Guardian/virus checking setup. I could put this on my IPCop firewall, or on my application server (you know, the machine that my xterminals go to for Firefox and the like). In terms of achieving the best security, I am wondering where the filtering should go: IPCop or my Slackware server.

I would expect to be able to update packages far more easilly on Slackware than IPCop, and that is where my processing power currently is (6years old: man it rocks). But with this I'd be letting grubby little packets into my innocent network.

Where should DG go?

Regards

Fogwatch.

there are a number of addons for ipcop which will interface with DG, so if you are already using ipcop, that would look like the most seamless way to go.

Since that post I've found Endian Firewall. It is a distro based on IPCop, only it has all of the fruit. For the short time I've used the distro is seems fantastic. It doesn't seem to have ident authentication though, unlike Advproxy.

I suppose I was wondering about security given all of the warnings about how the IPCop addons degrade security. I can't see why when most of them seem to be just adding security the application layer. Then there are other suggestions that Endian, with all of the addons, is the most secure. I think I'll go with a gut feeling here, and that is Endian Firewall. Dan will have to go out into the cold and sit on the firewall.

Thanks acid_kewpie