vmwarez.com
           -Where Virtualization is a Reality!

 

Tuesday, December 13, 2005

IPCop Test Rig...

UPDATED: 9/14/2006:
IPCop is now version 1.4.11 (details), URLFilter 1.7.1, ADVProxy 2.0Beta 4, Calamaris 2.1.0 and BlockOutTraffic 2.3.1 Build 2.

UPDATED: 5/25/2006:
New versions of URLFilter & ADVProxy are now included in the VM.

UPDATED: 3/3/2006:
Now includes BlockOutTraffic. Click here for details.

UPDATED: 12/29/05:
Upgraded Calamaris Proxy Report Generator to v2.0
Added Classroom Extensions for the Advanced Proxy add-on v1.0
Changed IP Addressing scheme... see readme in zip or download PDF
-------------------
I use IPCopfor testing all sorts of stuff. I used it when I was demo'ing the 2x thin client solution... it made a great virtual router for running another segment with dhcp that specified different PXE info than i wanted running on my production network... I've used it as a "more advanced NAT" than the basic vmware nat for when testing stuff. It will also do some level of bandwidth shaping and QoS. As a virtualized "DSL router" it does way more than any linksys out there... it passes GRE... lets you define source IP lists for your inbound NAT so that you're not leaving your network open to the whole world.

You can find all the official info about IPCop at http://www.ipcop.org/

This little gem can be used for all kinds of things. I've included a network diagram of how it will look on your PC: Click on it for a full sized PDF.



The IP addresses, may need to be changed to fit your network. You can do that by logging on as root and running "setup" from the prompt.

The root and admin passwords are both "vmwarez" and the url to the web interface is http://ipaddress:81 .

You can download this vm here. (about 65mb)

There's also a readme file that will give a little more info... along with the full size PDF of the network diagram and the VM --- all in the zip file.



Click here for more vmwarez.com pre-built VMs.

Posted By: Jim on Tuesday, December 13, 2005
PermaLink  |  36 comments  | Click to Comment

Bookmark at: Bookmark IPCop Test Rig... at del.icio.us    Digg IPCop Test Rig... at Digg.com    Bookmark IPCop Test Rig... at Spurl.net    Bookmark IPCop Test Rig... at Furl.net    Bookmark IPCop Test Rig... at YahooMyWeb   

 

36 Comments:

  • Nice work, Jim.

    I have been experimenting with IPCop on an ESX server too.

    Without downloading your image and trying to inspect it, I ask this here first: Have you managed to find a way to use vmxnet virtual nics with IPCop instead of vlance?

    It would be really nice to be able to use gigabit adapters instead of 10Mbit nics.

    Best wishes
    Heikki

    By Anonymous Anonymous, at February 06, 2006 6:19 AM  

  • I have not looked into that yet. Good idea. I would mention, though, that just because you are using the vmlance drivers does not limit you to 10mb. It will do faster, it just isn't very efficient. If anyone has figured out how to use the vmxnet drivers, please let me know and I'll update this VM.

    By Blogger Jim, at February 06, 2006 7:44 AM  

  • is there a mirror that we can use? Im dieing to try this out but im only seeing 1.6KB/Sec on a 10mb net connection.. not complaining, just currious...

    By Anonymous Anonymous, at February 08, 2006 2:53 PM  

  • I don't know of any mirrors, but since another user was kind enough to create a torrent for one of my larger files, the stress should be over. These IPCop files are small and don't cause much trouble, it is when 500 people try to download a 600mb file at the same time! Bandwidth is getting expensive.

    By Blogger Jim, at February 09, 2006 8:17 AM  

  • Hi everybody,

    Thanks a lot for this image. I'm currently encountering problem while trying to log as root. It tried as mentionned with vmwarez as login/password but I got the message "login incorrect".
    Could somebody help me to log please ? Many thanks,

    Julien

    By Anonymous Anonymous, at February 09, 2006 5:01 PM  

  • If you're doing it from the console or SSH, root/vmwarez should work. From the website, maint/vmwarez is what you want to use. HTH Jim

    By Blogger Jim, at February 09, 2006 5:53 PM  

  • The only problem I've ever had with IPcop is routing. The slow performance of the networking.

    This is my first experience with Linux.

    Routing, networking, routing.

    How can we make this thing go faster?

    By Anonymous Anonymous, at February 26, 2006 3:15 PM  

  • @Julien: I just encountered the same problem while trying to login. The solution was simple: As I have a german keyboard 'z' and 'y' are switched, so vmwarez becomes vmwarey and vice versa :))

    Bye, Mario

    By Anonymous Anonymous, at March 02, 2006 9:37 AM  

  • I also have a german keyboard, but it ain't working with vmwarez or vmwarey, always get wrong password too.
    Tried it with the 5.5.1 player and workstation.

    Greetz Dan

    By Anonymous Anonymous, at March 15, 2006 5:54 PM  

  • im new to this. I have 2 NIC on my computer one Local address, and the other a cable modem, I set up the VMWare IPCop. how do I make it so that inside VMWare Eth1 talks to the internet?

    By Anonymous Anonymous, at March 15, 2006 11:18 PM  

  • I'm newer than you... This is going to sound really dumb but... how do I get from the root to a browser so I can get to the GUI interface? Thanks.

    By Anonymous Anonymous, at April 21, 2006 8:36 PM  

  • I'm really new. How do I get from the command line to a browser?

    By Anonymous Anonymous, at April 21, 2006 10:18 PM  

  • Im trying to run this using VMWare GSX server 3.x and it tells me that the Virtual Machine Config File is Invalid.

    The ESX one doesnt work for me either.

    Any ideas which version i should be trying to use ?

    Olly

    By Anonymous Anonymous, at May 09, 2006 4:22 AM  

  • You may have to make your own. Their are pretty big differences between GSX 3.x and everything else at this point. The Workstation one works w/ workstation, player & server and the ESX version only works with ESX. Check out http://www.ipcop.org and download the ISO... It isn't too bad of an install and the 3 add-ons that are included in this VM are fairly easy to install too.

    HTH,

    Jim

    By Blogger Jim, at May 09, 2006 6:30 AM  

  • thanks for that Jim.

    Dont suppose you know if you can use the Advanced proxy plugin in IPCop on a machine (virtual) with just one network card installed, do you ?

    Olly

    By Anonymous Anonymous, at May 09, 2006 9:06 AM  

  • check out that drawing... their is only one NIC on that host PC... but two in the vm. It works like a champ. let me know how it goes.

    Jim

    By Blogger Jim, at May 09, 2006 10:24 AM  

  • i can't use web interface both port 445 and 81, check the ip is right. i just config ip for ether Red. anybody help me

    By Anonymous Anonymous, at May 14, 2006 9:59 AM  

  • I have the same problems here: neither in default config nor in custom config (using internal net IPs and bridging rather than NAT) it is not possible to access the IPcop vmware. I just retested it with a typo3-vmware, which works just fine.

    Any ideas why this happens?

    thanks

    T

    By Anonymous Anonymous, at July 05, 2006 4:26 AM  

  • I have the same problems here: neither in default config nor in custom config (using internal net IPs and bridging rather than NAT) it is not possible to access the IPcop vmware. I just retested it with a typo3-vmware, which works just fine.

    Any ideas why this happens?

    thanks

    T

    By Anonymous Anonymous, at July 05, 2006 4:27 AM  

  • Hi. I am using your appliance.

    After a reboot, I get the Error:

    "Could not download patches list. at /usr/local/bin/updatelists.pl line18."

    Any Ideas?

    By Anonymous Anonymous, at July 12, 2006 6:49 AM  

  • this is by far the most awesome thing ever.

    it was tricky to get running at first, but once i figured out what vmware was doing with ipcop it became rather intuitive.

    anyone having with connectivity, by default ipcop configures the eth0 as green and eth1 as red, and this convention holds with the vm hardware.

    i was having difficulty until i manually configured ipcop's network, then manually configured the ip settings for the green vm network interface my machine used to be ont he ipcop green network. after that, everthing worked like a charm.

    the best thing about this is that it completely circumvents my need for roadwarrior connections, and i'm instantly connected to all my networks. awesome job!

    By Anonymous Anonymous, at July 12, 2006 5:39 PM  

  • Can anyone point me to info on how to use the vm ipcop on a host with 2 nics so that several other real hosts plus this host access internet thru the ipcop firewall ? I've tried removing auto bridging and allocating virtual adapters to physical nics but somehow can't grasp how to do it.

    Gary

    By Anonymous GaryP, at July 22, 2006 1:14 PM  

  • I tryed the IPCop-ESX-Version on an ESX3. It istn't working. Does anybody's also got a problem with esx3 and IPCop? Or could you, Jim, probably make a esx3 Version of IPCop?

    Thanx

    By Blogger Truemmerli, at August 08, 2006 3:58 PM  

  • is there any way of getting ipac-ng on the image

    By Anonymous Anonymous, at August 11, 2006 8:25 AM  

  • Truemmerli --

    I have ESX3 also and did not mess with the pre-built VM. I just grabbed the ISO from ipcop.org and it worked like a champ.

    Didn't add the ADVProxy yet but I intend too...

    Don't have VMWare Tools installed but it doesn't seem to need it.

    By Anonymous Anonymous, at September 07, 2006 9:15 PM  

  • Hi,

    everything works fine, only the ADV-Proxy is not really working, i removed it and tried the normal proxy but it does not work either.
    anyone has the same problem?

    greetings badboy :)

    By Anonymous Anonymous, at September 18, 2006 1:06 AM  

  • Great product, seems to work like promised, except the Adv. Proxy, It does not seem to work, and in the system status window the service "web proxy" is always "stopped" (even when you enable it on the green interface) - any ideas?

    By Anonymous Anonymous, at October 03, 2006 7:46 AM  

  • Hello !
    Could you help me ?
    The password vmwarez doesnt work with the login root !!
    How can i do for the setup ?
    Thx

    By Anonymous Anonymous, at October 03, 2006 3:11 PM  

  • Ditto,

    Got the ADV. Proxy working by deleting /var/ipcop/proxy/squid.conf (it was empty). Then enable/Save and restart Adv. Proxy from the gui. This will recreate the .conf file, and the service should now show started.

    -e

    By Anonymous Anonymous, at October 10, 2006 1:59 PM  

  • Hi Jjones...i've a big problem with the last vm image of IPCOP isntalled on two differente machine, under xp pro.
    All i working file , except that i'm not able to enable proxy web service, or better , i'm able to flag it and write enable in gui screen, but if i check system status, the web proxy is always disabled.
    If i try to run squid in the console i receive an error regarding that ACL all is not defined..
    do you know if somebody else has the same problem ? thx a lot

    By Anonymous Chris, at October 13, 2006 6:35 AM  

  • Hi I have downloaded your ipcop-basic-test-rig.
    it works fine on my computer but on the network from other computers;
    I can ping the ipcop virtual machine, and also reach to the admin interface from network I can not connect to the internet.
    please help me fixing this.

    By Anonymous Anonymous, at November 29, 2006 5:59 AM  

  • Hi! I need to block a msn with the IPCOP. Anyone help me?

    By Anonymous Maroun, at January 19, 2007 4:34 AM  

  • Hello Ditto, i erase the file that you say and the web proxy is running!

    ¿Could you say me how do you get this solution?¿what log do you see?

    "Better than to give to a man a fish, it is to teach him fish"

    By Anonymous Anonymous, at February 18, 2007 1:51 PM  

  • I've downloaded and fired it up in vmware without any problem. I'm able to use the webgui of ipcop through the http://greenIP:81.

    Within vm's (using green/ip) i can resolve webpages perfectly.

    Does anybody knows how to put the host internet traffic trough the ipcop? So i 'placed' the host-nic is in the greennetwork. Ping/shares from host to other greenvm's work perfectly. Interenet from the host/vm's isn't working anymore.

    Somehow i expect the intenet traffic will be looped back into ip cop this way.

    Anyone got a solution?

    Greetings djieno

    By Blogger djieno, at March 01, 2007 3:13 PM  

  • I realize this is an older blog entry, but hopefully you can respond.

    Ultimately we are setting up a team for development. I am going to have an XP client, XP (with development tools) client, 2003 Standard (WEB) Server, and 2003 Standard Server (Domain Controller). Since the AD is a virtualized version of our true internal AD server we do not want this "TEAM" having any access with our internal network. This is exactly what the "team" is for, BUT we do need internet access which is available from our internal network.

    We were told IPCop would allow us to allow outbound traffic from the TEAM to the internet, but allow us to ONLY let it go to the internet and NOT any of the internal IP's.

    Is this doable for IPCOP in this scenario?

    Is there any sort of summary overview you could provide based on what we are trying to do?

    Thank you.

    G

    By Anonymous Anonymous, at March 17, 2008 2:40 PM  

  • I've been trying to upgrade ipcop vm
    and as soon as I reboot after 13 and
    14 the grub config is corrupt and
    it is unresponsive. any ideas?

    By Anonymous david delikat, at April 18, 2008 6:06 AM  

Post a Comment

<< Home