2. Overview

You will be installing an operating system on the IPCop PC. It is a Linux based operating system, but it is not meant to be a general-purpose system. The firewall design attempts to eliminate as many features from the system as possible. The central idea is that the more code that runs on the firewall, the more places there are that are vulnerable to attacks. Do not expect facilities like sendmail or FTP daemons to be present. These are not needed on a firewall and may contain holes that are known to malicious users.

Although these instructions will appear to be long and often detailed, take heart. Once you have figured out what you want to do and have obtained your current configuration parameters, installing IPCop will take as little as fifteen minutes.

You will have to boot from an installation media (cdrom, floppy, usb key) or from the network with PXE boot.

Boot from floppy should work in all configurations.

Boot from cdrom may not be supported by old machines (should work after first Pentium I).

Boot from network depends if an installed netcard is shipped with a boot ROM.

Boot from usb device needs a recent BIOS (typically a motherboard with Pentium IV, Athlon XP 2600 or better).

The installation media are distributed as files on Sourceforge. If you have a CD burner, you will probably want to create a bootable CD from the ISO file using ipcop-1.4.23-install-cd.i386.iso

If your BIOS is recent and supports booting from a usb key, you have the option to install from a usb key formatted as a superfloppy (ipcop-1.4.23-install-usb-fdd.i386.img.gz), a hard disk (ipcop-1.4.23-install-usb-hdd.i386.img.gz) or a Zip disk (ipcop-1.4.23-install-usb-zip.i386.img.gz).

If you cannot burn a CD, you could place files from the ISO image on a web or FTP server.

If the IPCop PC cannot boot from CD, you will have to create a bootable floppy using files in the /images directory of the CD, or try a PXE boot using the ipcop-1.4.23-install-pxe.i386.tgz package. Instructions are inside the package.