IPFire seeks to address both these, as expressed in its tagline, 'security gone easy!'
In particular, IPFire has been designed to serve as a policeman and traffic copy intercepting and inspecting all the traffic between your network and the Internet. In this regard it essentially turns a computer into a sophisticated firewall and router appliance.
This is achieved by bundling a pre-configured collection of top-notch open source security tools as well as IPFire's own custom-built packet manager called Pakfire. Pakfire permits close inspection of TCP/IP packets as they come in to the network and thus the ability to make complex decisions based on them. Pakfire supports a plug-in architecture so it can be easily extended by others.
IPFire isn't just a burn, mount and forget distro; effort has been expended by the designers to ensure it keeps up to date with security and regulatory patches and changes.
In addition, the team behind IPFire has put in a lot of work to make sure the whole lot is glued together in a cohesive user interface which aims to be clear from beginners through to experienced old hands.
IPFire has downloadable images to suit CDs, USB sticks, embedded device and even a ready-to-run Xen virtual machine.
You're reading The Linux Distillery. Click here for more.