IPCop 2.0

[Davesworld]

As a proof of concept, I built a Cobalt friendly svn grab of what will eventually become IPCop 2.0 which uses the 2.6.24.7 kernel as of this version which is 1.9.2 in the devel cycle.

DO NOT USE DIRECTLY ON THE INTERNET! If you do and you get owned, you were warned. Yes, some things are still broken but much of it does work and you can see the new grey and black gui in action.

Jeff Walters's patch applies nicely but the .24 and .25 kernels have had some major rearranging and presented a challenge to all who are involved.

Since 1.9.2 uses a single kernel build and we're not ready for network installs, I wound up making a second kernel build script to make a cobalt specific kernel and modules and leaving the ipcop team's kernel intact as the installer is based on it and we use VMWare or a donor pc to install to the drive.

2.0 is a ways off yet, eight more versions before it's even alpha and many things still to be decided for the final such as whether to stay with Smoothwall code or switch to Shorewall.

Warnings aside, I have been using my 3G HSDPA card with this and proxying through with a browser. The new kernels have such great 3G card support and pcmcia, usb and anything related are automatically picked up and loaded with no intervention needed by /etc/modules.conf. That said, AT&T Nats the connection between the end user and the actual internet presence. If IDS even worked on this yet, it would be pointless since you simply cannot find this machine from the internet. Even so, nothing is ever 100% safe.

No way would I put this on my dsl connection with a bridged modem. Way too soon to even think about that. The 1.4 branch is plenty good to use daily until then but yeah, it's fun to tinker isn't it?