Endian Firewall Explained
| Endian |
| Family: | Linux (Unix-like) |
| Source Model: | Open source |
| Latest Release Version: | 3.3.2 |
| Kernel Type: | Linux 4.4 |
| Ui: | Web user interface |
| License: | Various |
| Working State: | Current |
Endian Firewall is an open-source router, firewall and gateway security Linux distribution developed by the South Tyrolean company Endian. The product is available as either free software, commercial software with guaranteed support services, or as a hardware appliance (including support services).
Description
Endian Firewall is a Linux security distribution, which is an independent, security management operating system. The system is installed on a PC using a boot CD, and can be operated without a monitor through its online interface or via a keyboard in a command-line interface. The server can be configured via a web interface or the serial interface.
The main task of Endian Firewall is as a gateway, router and firewall, and can act as a proxy for web, email, FTP, SIP and DNS. Up to four different networks (dependent on the number of network cards installed in the host PC) can be managed. Networks are configured through the web interface. With Endian these are differentiated by their color coding:
Red Network: connection to the insecure Internet.
Green Network: Secure
intranet, e.g. file server.
Orange Network: Part Safe
Demilitarized Zone (DMZ). This includes devices that operate their own server and must be accessible over the Internet, such as Web or FTP servers.
Blue Network: Secure
wireless part, here on wireless devices can be connected. Thus, they are separated from the green network, which increases its security.
Endian Firewall includes support for load balancing, which means you can add another connection to the Internet from the red network. Endian Firewall then distributes the network load on both network interface controllers.
License
The software is developed by the Italian Endian Spa from Appiano, South Tyrol and a community of volunteer developers. The license model of Endian provides a commercial version and a free version:
- The commercial version can be purchased either as a standalone software (the product is called Endian or simply Endian UTM Software) in order to install them on their own PCs, as well as in the form of finished Out of the Box firewalls, with special hardware on which the software is preinstalled. There are currently seven hardware variants with different performance and for different network sizes: Mini 25, Mercury 50, Mercury 100, Macro 250, Macro 500, Macro 1000 and Macro 2500.
- Both the free Endian Firewall Community and the commercial Endian UTM Software are tailored for installation on your own hardware. The Endian Firewall Community is licensed under the GPL and is therefore open source software that can be downloaded for free. The community version does not include support and not all the features of the commercial version are available.
Features
The current version includes the following key features:
Gateway
Firewall & Security
- Firewall (both directions)
- Demilitarized Zone
- Intrusion Detection System / Intrusion Prevention System
- Web-, FTP- and E-Mail-antivirus
- Antispam
- Content Filter
- HTTPS- Web interface
- SSH- Access and Forwarding
- Scheduler for automated backups
Server Services
User Management
Logging & Monitoring
- Visualized Live Log Viewer (AJAX based), see figure "The web interface of Endian Firewall"
- Log the activities and the stress of network and hardware
- Connection statistics
- Forwarding possibility of logs to an external syslog server
- ntopng integration
- Event-based notifications by e-mail
Others
History and compared to the original
Endian Firewall is a fork of the Linux firewall IPCop, which in turn is a fork of SmoothWall. Due to numerous further developments, only one-fifth of the original IPCop code is used. Newer versions have been based initially on Linux From Scratch and from version 2.2 to RHEL,[1] or on CentOS.[2] With the upcoming version 3.0, Endian Firewall is virtually "Smoothwall-" and "IPCop-free".
The greatest difference from IPCop is that the Endian Firewall is not merely a pure router-firewall combination, but a comprehensive gateway security solution (Unified Threat Management). For this, a virus scanner and a spam blocker have been firmly integrated into the distribution. This allows the transport of HTTP, FTP, POP3 and SMTP scanned in real-time and optionally filtered.
Also, the menus were refined from the IPCop approach, reducing complexity, but also reducing reconfigurability of the individual services.
Concerning the business model, Endian is different to its origins in SmoothWall and IPCop as follows:
- SmoothWall: a commercial version is developed by SmoothWall Ltd and a free version by a community of volunteers. Innovations in the commercial version are only partially transferred, and security updates are sometimes deliberately delayed in the free version. This policy was the reason for the forking of Smoothwall and community development of IPCop.[3]
- IPCop: development exclusively by a community of volunteers with only a free version.
- Endian Firewall: Friendly refinement of IPCop with the aim to expand the software functions to create a comprehensive security gateway software. As with SmoothWall, Endian Firewall also includes features in the commercial version functions that are missing from the free community version.
Resonance
- The Endian Firewall is part of c't-Debian-Server Version 4 (published by August 2009) and this was already 2007.[4]
- In July 2005, the Endian firewall was OSDir[5] elected Project of the Week.
- The Linux Magazine 09/2008 has Endian Firewall UTM Appliances 2.2 and tested the system to certify a test result in the upper middle of comparable products.[6]
External links
Notes and References
- Web site: Development Release: Endian Firewall 2.2 Beta 2 (DistroWatch.com News). Distrowatch.com. 2015-07-09.
- Web site: Distribution Release: Endian Firewall 2.3 (DistroWatch.com News). Distrowatch.com. 2015-07-09.
- Web site: Linux Firewall: Smoothwall & IPCop. https://archive.today/20120907073338/http://www.linuxnetmag.org/2002-05-25-linux-firewall-smoothwall-ipcop. 7 September 2012. dead.
- Web site: c't-Debian-Server | c't. Heise.de. 2015-07-09.
- Web site: Project of the Week: Endian Firewall :: OSDir.com :: Open Source, Linux News & Software. OSDir.com. 2015-07-09. https://web.archive.org/web/20151227000312/http://www.osdir.com/Article6290.phtml. 2015-12-27. dead.
- Web site: Jörg Fritsch. Praxistest: Endian Firewall Macro X2 » Linux-Magazin. de. Linux-magazin.de. 2015-07-09.
