http://www.ipcop.org/index-pn.php?name=FAQ&id_cat=2
FAQ
What is the IPCop firewall?
IPCop Firewall is a Linux firewall distribution geared towards home and SOHO (Small Office/Home Office) users. The IPCop interface is very user-friendly and task-based. IPCop offers the critical functionality of an expensive network appliance using stock, or even obsolete, hardware and OpenSource Software.
IPCop防火牆是什麼？
IPCop Firewall是一種Linux防火牆套件，主要面向家庭和SOHO(Small Office/Home Office)用戶。IPCop 的界面非常友好，並且是基於任務的。 IPCop提供的關鍵功能只有某些昂貴的網絡程序纔有。IPCop在老舊甚至淘汰的硬件中就可以運行，（更重要的特點是）它是一種開源軟件。
OLD PC + IPCOP = Secure Internet Appliance
舊電腦+IPCOP = 安全的互聯網程序
IPCop lets you take an old PC and convert it into an appliance that will.
IPCop可以把舊電腦轉換成一個程序，它可以實現：
1. Secure your home network from the internet.
2. Improve the performance of web browsers (by keeping frequently used information)
1.在你的家庭網絡連接互聯網時給予保護
2.改善web瀏覽器行爲（保證頻繁使用的信息）
All this functionality can be managed from a simple to use web interface, even updates and patches can be installed using a web browser.
Remember IPCop works with most home networks and small office networks, dial up modems, cable modems, ADSL, Leased lines and ISDN. It also lets several PCs share connections to the internet. If you have an always on connection to can even use IPCop to protect your web and email servers. IPCop also has remote management meaning you can securely update and reconfigure your IPCop firewall from anywhere with an internet connection!
所有的功能都可容易地通過web界面進行管理，甚至升級和打補丁也可以通過這一界面實現。ipcop多用於家庭或小型辦公網絡，撥號調制解調器，電纜調制解調器，ADSL，出租線路和ISDN都可以使用ipcop。
--------------------------------------------------------------------------------
How does IPCop Firewall work?
IPCop Firewall basically sits "in between" your Internet connection (dial-up modem, cable-modem, DSL, etc) and works directs traffic using a set of rules for the TCP/IP traffic that underlies all Internet activities. The default rules, ideal for most users, are essentially simple in nature. They allow you to "surf" to the outside world and visit web-sites, FTP, email and so forth. And as you go about your tasks on the Internet, IPCop allows return traffic from those tasks, that you requested, to pass through. If, however, some random TCP/IP traffic comes in, requesting information from your computer, and that traffic is not in response to your requests, IPCop Firewall refuses to respond, and logs that attempt. Thus, you are allowed to go about your normal business, but when the bad guys try to come after you, they are stopped cold, because they are not responding to your requests. Think of IPCop Firewall as your friendly traffic cop down on the corner, making sure that things travel smoothly, and enforcing good rules on your Internet traffic.
IPCop防火牆是如何工作的？
IPCop防火牆一般處於Internet連接（撥號調制解調器，電纜調制解調器，DSL等）與工作網絡之間。TCP/IP是構成互聯網活動的基礎，IPCop使用一系列規則處理TCP/IP流。默認的規則適用於多數用戶，非常簡單。你可以上網衝浪訪問web或FTP站點，收發email等。當你通過Internet工作時，IPCop允許你的“工作”返回需要的數據。然而如果一些隨機的TCP/IP流向你的電腦請求數據，這樣的請求將不被響應。IPCop還會記錄下這些企圖。因此，你可以正常的工作，但當壞人企圖尾隨而至時，他們將被毫不留情地拒之門外。因爲你的請求將不被他們響應。你可以認爲IPCop是友好的網絡交通警。他保證網路暢通，並在你的Internet流上採用最佳規則。
--------------------------------------------------------------------------------
Will I be able to do everything I did before?
Yes, but... :-)
There are some applications which, under the hood, set up two channels of TCP/IP traffic for various reasons. For example, many online shoot-em-up games like Quake open up several TCP/IP channels to so that high-priority messages such as movement and shooting the bad guys can get through on the priority channel, while the graphics are sent through a lower-priority channel. Similarly, NetMeeting and some NetMessenger applications open up multiple channels in order to facilitate multiple people talking at once. You can still use these games, but you'll need to do some post-installation configuration to alter the "Rules" a little bit so that IPCop Firewall (your friendly traffic cop) will know about your specific exceptions.
我以前能做的事情現在也能做嗎？
可以，但是……
有些程序由於某些原因建立2個TCP/IP通道。例如，一些在線射擊類遊戲（如Quake），會打開幾個TCP/IP通道，以便像移動、向壞人射擊這類信息可以通過高優先級通道，而圖形這類信息則通過低優先級通道傳遞。類似的，NetMeeting這種即時消息軟件爲了讓多人同時交談需要打開多個通道。你仍然可以使用這些軟件，但你需要進行一些安裝後的設置，讓IPCop知道有一些特殊的例外。
--------------------------------------------------------------------------------
What if I need remote access to my computers?
You can configure IPCop Firewall and your remote computers to use VPN which basically lets authorized remote computers "pretend" to be behind your firewall, even if, in reality, they are far, far away in a distant galaxy. Check out the IPCop VPN documentation.
You can remotely access your desktop from any location with an internet connection here is how.
如果需要遠程接入我的電腦要怎樣？
你要設置IPCop，遠程電腦要使用VPN讓這臺機器看上去像是處於防火牆的後面，即使實際上它們非常遠。
在聯網狀態下，你可以從任何地點遠程登錄你的桌面。
To remotely access your the Desktop machine (UNIX workstation, PC with Linux or Windows or Macintosh) use VNC. Some Windows users may prefer TightVNC. Install VNC on your desktop machine.
由於一些Windows用戶喜歡使用TightVNC，所以也可以使用VNC來登錄遠程桌面。
To secure access to your Desktop Machine SSH is recommended. SSH is built into IPCop (you have to switch it on using the web interface: One the IPCop web interface select, System, SSH and enable SSH then press Save).
爲了安全的登錄到桌面機，推薦使用SSH。SSH被內置於IPCop中（你可以使用web界面打開它：在IPCop的web界面上選擇system,SSH,開啓SSH，保存）
Now on the remote site you will need an SSH Client.
- Windows PuTTY
- Macintosh NiftyTelnet SSH
- Unix OpenSSH
You can find more extensive lists of SSH clients for various (other) operating systems here).
Open port 222 in External services.
Open an SSH connection and setup a tunnel to your desktop machine.
Use a VNC client (a java enabled browser will do) on the remote PC to access your desktop at home!
這時你需要一個SSH遠程客戶端
- Windows PuTTY
- Macintosh NiftyTelnet SSH
- Unix OpenSSH
你可以在這裏找到大量的用於不同操作系統的SSH客戶端列表
開啓外部服務端口222
開啓一個SSH連接並建立一個通向你機器桌面的通道。
在遠程PC上使用一個VNC客戶端登錄你家中的電腦桌面。
--------------------------------------------------------------------------------
Where can I talk to others about IPCop?
Well, there is the IPCop Users mailing list of course and there is also the IPCop IRC channel. To join the IRC channel just connect to server: irc.freenode.net and then the IPCop channel: #ipcop
在哪能找到一起討論IPCop的人？
這裏有郵件列表和IRC頻道。可以加入irc.freenode.net的#ipcop頻道來交流。
--------------------------------------------------------------------------------
What are the benefits of IPCop (software based firewall) over Hardware based firewalls or other software based solutions?
Basically, a hardware based firewall will require that you purchase the complete solution (hardware and software) for a rather hefty sum. Other software solutions are either commercial (you pay) or free and doesn't offer the level of security and/or ease of use that IPCop does.
IPCop與硬件防火牆和其它軟件防火牆相比有什麼優勢？
總的說來硬件防火牆很貴。軟件防火牆要麼是商業軟件（要付費）要麼免費的達不到IPCop的安全水平和易用性。
--------------------------------------------------------------------------------
Sounds Good. What gear will I need?
聽起來不錯，我需要什麼設備？
First, you'll need a whole new computer for IPCop itself. This is not as excessive as it sounds. For one thing, IPCop can run on obsolete hardware that many companies are literally throwing away as "useless". IPCop Firewall will be connected to the outside world, so you'll need a cable and whatever kind of card (modem, NIC, etc) that you would normally have in your computer. Exactly what you need for this connection depends on how you connect to the Internet, but you probably can simply move the existing cables and hardware from your current computer to IPCop Firewall.
Then, you'll need another cable and NIC in IPCop Firewall to connect to your computer, or to your switch/router if you have several desktops to hook up. Finally, you'll need a NIC in your desktop computer, or one in each desktop computer if you have several desktops to hook up. Check the Installation Guide for more information.
首先你需要一臺計算機單獨給IPCop使用。這並不過分，IPCop可以運行在許多公司淘汰下來的舊機器上。IPCop可以聯網，所以你需要能連網的網線或是網卡什麼的，它們一般在你的計算機中都有。你真正需要什麼東西取決於你想要怎樣連上Internet，你或許只是簡單的把現有的網線和設備用在IPCop上。
那麼你需要另一套網線和網卡來使IPCop連到你的電腦上或者連到交換機上（或路由器上）。最後在你的工作電腦上需要一塊網卡，如果你有幾臺電腦需要連網，那就每臺電腦配一塊網卡。更多信息請參考安裝指南。
--------------------------------------------------------------------------------
Who do I speak to, to add feature x,y,z?
If in need of a feature not yet found in IPCop, it is best to add an RFE item on the request for enhancements list. You can find this list on our SourceForge page.
我需要一些功能，應該跟誰說？
如果有些功能在IPCop中沒找到，最好是在需求列表中加入一個RFE項目。你可以在SourceForge網站上找到這個列表。
--------------------------------------------------------------------------------
I love it, how can I help?
Spread the word! ;)
Seriously, we can only make IPCop better by having more people using it to let us know where we can improve it. So tell everyone you can about it.
If you happen to have a good background in Linux, Perl, XML, Firewalling, Support background or security and have the time to give to the IPCop Project then contact CharlesWilliams for more information.
我喜歡它，我能幫助它嗎？
說真的，我們只能通過讓越來越多的人來使用它從而使IPCop變得更好。所以把它介紹給你認識的人吧。如果你剛好精通Linux, Perl, XML,防火牆，技術支持或是安全類技術而且你有時間投入到IPCop項目中去，請聯繫CharlesWilliams。
--------------------------------------------------------------------------------
Can I sell IPCop?
Please read the GNU article Selling Free Software.
IPCop可以出售嗎？
請閱讀GNU文檔《自由軟件的出售》
--------------------------------------------------------------------------------
Can I mirror the IPCop ISO?
Certain people will be allowed to mirror the IPCop ISO. We will keep an updated list of where these mirrors are and this list will contain the ONLY authorized list of mirrors. If you download an ISO from anywhere else then you may be downloading an ISO that has been tampered with. Always check the MD5sum for the iso you have downloaded before installing IPCop.
可以複製IPCop的ISO文件嗎？
任何人都可以複製IPCop的ISO文件。我們將保有一份這些鏡像文件所在位置的列表，它也是唯一經過授權的列表。如果你從其它地方下載了一個ISO文件，則它有可能是經過修改的。請在下載後安裝之前測試ISO文件的MD5碼。
--------------------------------------------------------------------------------
This FAQ didn't help me. Where do I go next?
Reading the full IPCop Documentation is always good.
If you're having trouble with installing or configuring IPCop, the IPCop Installation and IPCop Administration Guides are a must.
Search the IPCopMailingLists archives
Next, try posting a question to the appropriate IPCop Mailing List.
Check the other support sites as listed on the Support page.
此問題列表沒有幫我解決問題，我接下來去哪？
閱讀完整的IPCop文檔總會有所幫助。
如果你在安裝和配置IPCop時遇到困難，最好閱讀IPCop安裝和管理指南。
查看IPCop郵件列表。
接下來，在適當的IPCop郵件列表中提出問題。
在技術支持頁查找其它站點。
--------------------------------------------------------------------------------
It's not really what I wanted...
IPCop is only a firewall appliance. If you want a Connectivity Server, with network file shares, email etc. take a look at these alternatives:
SME Server
ClarkConnect
Print Server appliance
http://www.pigtail.net/LRP/printsrv/
它根本不是我想要的
IPCop只是一個防火牆程序。如果你需要一個連接服務器，用來做網絡文件共享，email等用途，請看看SME Server，ClarkConnect或Print Server appliance。
