2.7. System Web Pages

This group of web pages is designed to help you administer and control the IPCop server, itself. To get to these web pages, select System from the left-hand menu. The following sections outline the use of each of these web pages.

2.7.1. Updates AW

This section has 3 functions:

  1. Shows your current patch level.

  2. Informs you of new patches available.

  3. Allows you to apply a given patch.

Every time you connect to the Internet IPCop will check for any new Updates that may be available. You may also manually check for updates by clicking the Refresh update list. When a new patch is available you will see the information on screen with the short description and a link for more information. When you have followed the information link you will see a page with all relevant information about the patch including a download link.

Downloading the patch will place it on the machine you are running your web browser on, not the IPCop machine. Once you have downloaded the patch simply Browse to where you saved it and then Upload the patch to apply it to your IPCop server.

Note

The Opera web browser does not handle uploads properly and thus should not be used for applying a patch to your IPCop server.

Note

Only IPCop official patches will actually install on your IPCop server. Some patches may automatically reboot your IPCop server, so please read all patch information thoroughly before applying said patch.

2.7.2. Time

The Time AW allows you to accurately set the time on your firewall using the Network Time Protocol.

Note

IPCop is not an NTP server. It uses the ntpdate command to update its time. The ntpd service is not installed on IPCop and so it cannot act as a time server.

2.7.2.1. Use a Network Time Server

Enabled .  Checking this box will turn on the facility. While the time server facility is enabled, information about the last update will appear in this section.

2.7.2.2. Update the time

This section allows you to set the time servers to be used and whether the IPCop server will update its time manually or automatically.

Manual/Every Radio Buttons .  Chose whether IPCop will automatically update its time or manually. If you choose Every:, set the time interval between NTP updates.

Primary NTP Server .  Enter the primary time server address here. If you have a local NTP server, use it. Otherwise, information on available time servers can be found at the Public NTP Time Servers web site. Stratum 1 servers are to be used only by NTP servers that support networks of over 256 computers. Use one or more Stratum 2 servers, since only the IPCop server, itself, will be setting its time with NTP. Although not required, it is polite and useful to email the administrators of the server(s) you choose. If the administrators know you are using their server they can let you know, via email, if things change.

Secondary NTP Server .  This field is optional. Set this to a different Stratum 2 server. This allows some redundancy if for any reason the primary server, above, is unavailable.

Set Time Now .  Use this button after filling out the above fields to set the correct time on the IPCop machine.

Clicking on the button queues a request for a time synchronisation. The message “Waiting to syncronize clock” appears until a successful sync occurs. This could take up to five minutes or longer, as a cron job periodically checks for requests.

Save .  Use this button to save IPCop's NTP configuration. If there are any errors, error messages will appear in the Error messages section, below.

2.7.2.3. Error messages

Error messages associated with setting the time will appear in this section.

2.7.3. Passwords

The Passwords subsection of this AW is present to allow you to change the Admin and/or Dial User passwords, as you deem necessary. Simply enter the desired password once in each field for the User you wish to update and click on Save.

2.7.4. SSH

The SSH subsection of this AW allows you to decide of remote SSH access is available on your IPCop server or not. By placing a checkmark in the box you will activate remote SSH access. This option is disabled by default and we would advise enabling it ONLY AS NEEDED AND THEN DISABLING IT AFTERWARDS.

2.7.5. Intrusion Detection System AW

This AW simply offers you the opportunity to either activate or deactivate the Intrusion Detection System, Snort that comes with IPCop.

2.7.6. Backup AW

The Backup AW will let you back up your IPCop configuration to a floppy disk. The easiest way to restore your configuration is to reinstall IPCop from CD-ROM or HTTP/FTP. Early in the installation process, you will be asked if you have a floppy with an IPCop system configuration on it. If you wish to restore your configuration from a backup floppy, place the floppy disk in the floppy drive and select the Restore button. Your configuration will be restored and installation will terminate.

Warning

At this time, IPCop will not overwrite DOS formatted floppy disks. To format a floppy disk for IPCop, you will need to format it for Linux. The command to do this is:

# fdformat /dev/fd0

If you have another Linux machine, you can format a floppy on that machine. Otherwise, use ssh or putty to log in to IPCop as root, and issue the command there. fdformat will not prompt for a floppy like DOS format will, so insert the floppy disk into the floppy disk drive before issuing fdformat.

2.7.6.1. Backup configuration

Place a floppy disk in the floppy disk drive and click the Backup button. Your configuration will be written to the floppy and verified.

2.7.6.2. Information

All messages generated during backup will appear in this section of the page during backup.

2.7.7. Shutdown AW

This AW here is to allow you to either Shutdown or Reboot the IPCop server from a remote location. Simply click the button of the option you want and that's it.