+++ /dev/null
-{% extends "../base.html" %}
-
-{% block title %}{{ _("Features") }}{% end block %}
-
-{% block container %}
- <section>
- <div class="container">
- <div class="row">
- <div class="col col-lg-6">
- <h1 class="display-2">{{ _("Features") }}</h1>
-
- <p>
- {{ _("IPFire is a powerful and professional Open Source firewall solution") }}
- <br>
- {{ _("Learn what it can do") }}
- </p>
- </div>
- </div>
- </div>
- </section>
-
- <section class="inverse">
- <div class="container">
- <div class="row">
- <div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-start">
- <span class="fas fa-shield-alt icon-large text-primary my-5"></span>
- </div>
-
- <div class="col-12 col-md-9">
- <h1>{{ _("Security") }}</h1>
-
- <p>
- The primary objective of IPFire is security.
- Its easy to configure firewall engine and Intrusion Detection System
- prevent any attackers from breaking into your network.
- In the default configuration, the network is split into various zones
- with different security policies such as a LAN and DMZ to manage
- risks inside the network and have custom configuration for the specific
- needs of each segment of the network.
- </p>
-
- <p>
- But even the firewall needs to protect itself.
- IPFire is built from scratch and not based on any other distribution.
- This allows the developers to harden IPFire better than any other
- server operating system and build all components specifically for use
- as a firewall.
- </p>
-
- <p>
- Frequent updates keep IPFire strong against security vulnerabilities
- and new attack vectors.
- </p>
- </div>
- </div>
- </div>
- </section>
-
- <section>
- <div class="container">
- <div class="row flex-md-row-reverse">
- <div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-end">
- <span class="fas fa-fire icon-large my-5"></span>
- </div>
-
- <div class="col-12 col-md-9">
- <h1>{{ _("Firewall") }}</h1>
-
- <p>
- IPFire employs a Stateful Packet Inspection (SPI) firewall,
- which is built on top of Netfilter, the Linux packet filtering framework.
- It filters packets fast and achieves throughputs of up to multiple
- tens of Gigabit per second.
- </p>
-
- <p>
- Its intuitive web user interface allows to create groups of hosts and
- networks which can be used to keep large set of rules short and tidy -
- something very important in complex environments with strict access control.
- Logging and graphical reports give great insight.
- </p>
-
- <p>
- Various settings are available to mitigate and block Denial-of-Service
- attacks by filtering them directly at the firewall and not allowing them
- to take down your servers.
- </p>
-
- <p class="mb-5">
- <a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/firewall">
- Firewall Documentation
- </a>
- </p>
-
- <h4>Intrusion Detection/Prevention System</h4>
-
- <p>
- IPFire's Intrusion Detection System (IDS) analyzes network traffic and tries to
- detect exploits, leaking data and any other suspicious activity.
- Upon detection, alerts are raised and the attacker is immediately blocked.
- </p>
-
- <p>
- <a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/services/ids">
- Documentation
- </a>
- </p>
- </div>
- </div>
- </div>
- </section>
-
- <section class="inverse">
- <div class="container">
- <div class="row">
- <div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-start">
- <span class="fas fa-network-wired icon-large my-5"></span>
- </div>
-
- <div class="col-12 col-md-9">
- <h1>{{ _("Connecting the World") }}</h1>
-
- <p>
- Virtual Private Networks (VPNs) connect remote locations like data centers,
- branch offices or outsourced infrastructure via an encrypted link.
- IPFire allows staff to work remotely as if they would be sitting in the office
- and allowing them to access all resources that they need - fast and securely.
- </p>
-
- <p>
- IPFire supports industry standards like IPsec and OpenVPN and interoperates with
- equipment from various vendors like Cisco & Juniper.
- VPNs are quickly and easily set up with IPFire and employ latest cryptography.
- </p>
-
- <div class="row">
- <div class="col-12 col-md-4 mb-3">
- <div class="d-grid">
- <a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/services/ipsec">
- VPN with IPsec
- </a>
- </div>
- </div>
-
- <div class="col-12 col-md-4 mb-3">
- <div class="d-grid">
- <a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/services/openvpn">
- VPN with OpenVPN
- </a>
- </div>
- </div>
- </div>
- </div>
- </div>
- </div>
- </section>
-
- <section>
- <div class="container">
- <div class="row flex-md-row-reverse">
- <div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-end">
- <span class="fas fa-box-open icon-large my-5"></span>
- </div>
-
- <div class="col-12 col-md-9">
- <h1>{{ _("Add-ons") }}</h1>
-
- <p>
- From a technical point of view, IPFire is a minimalistic, hardened operating system.
- To provide more functionality, it can be extended by add-ons which are installed with
- IPFire's own package management system called <em>Pakfire</em>.
- </p>
-
- <p>
- Add-ons can be handy command line tools for administrators or can extend the system
- to provide additional functionality. Those include:
-
- <ul>
- <li>
- Turning IPFire into a <a href="https://wiki.ipfire.org/addons/wireless">Wireless Access Point</a>
- </li>
-
- <li>
- Tools for Monitoring and System Health Management
- </li>
-
- <li>
- Backup, File and Print Services
- </li>
-
- <li>
- Running a <a href="https://wiki.ipfire.org/addons/tor">Tor</a> node
- </li>
-
- <li>
- Proxies and Relays for various protocols
- </li>
-
- <li>
- and many more...
- </li>
- </ul>
-
- <a class="btn btn-secondary" href="https://wiki.ipfire.org/addons">
- List of all Add-ons
- </a>
- </p>
- </div>
- </div>
- </div>
- </section>
-
- <section class="inverse">
- <div class="container">
- <div class="row">
- <div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-start">
- <span class="fas fa-angle-double-right icon-large my-5"></span>
- </div>
-
- <div class="col-12 col-md-9">
- <h1>{{ _("Making Your Internet Faster") }}</h1>
-
- <p>
- The IPFire Quality of Service (QoS) categorizes network traffic and sends it out
- prioritized by how important it is to ensure a good service.
- For example, a Voice-over-IP call will always have priority over a large download
- to ensure that words will never get lost and call quality is always the best it can be.
- </p>
-
- <p>
- Even on very busy links, IPFire will make sure that websites load fast and that the
- network is quick and responsive by using smart queueing algorithms and getting the
- most out of your bandwidth.
- </p>
-
- <p>
- <a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/services/qos">
- Documentation
- </a>
- </p>
- </div>
- </div>
- </div>
- </section>
-
- <section>
- <div class="container">
- <div class="row flex-md-row-reverse">
- <div class="col-12 col-md-3 d-flex align-items-center justify-content-center justify-content-md-end">
- <span class="fas fa-server icon-large my-5"></span>
- </div>
-
- <div class="col-12 col-md-9">
- <h1>{{ _("Web proxy") }}</h1>
-
- <p>
- One of the most commonly used features of IPFire is the full-fledged web proxy.
- It delivers and filters web content and can only allow Internet access for some
- users.
- </p>
-
- <p>
- Caching content on the firewalls disk makes websites load faster.
- External regularly updated blacklists allow banning browsing on various websites
- when they are for example not suitable for students.
- Optionally, the IPFire web proxy can transparently scan for viruses and block
- them straight away.
- </p>
-
- <p>
- The web proxy makes IPFire perfect for schools and universities where
- access control and logging is required.
- </p>
-
- <p>
- <a class="btn btn-secondary" href="https://wiki.ipfire.org/configuration/network/proxy">
- Documentation
- </a>
- </p>
- </div>
- </div>
- </div>
- </section>
-{% end block %}
projects / ipfire.org.git / commitdiff
