IPFire is a hardened Linux appliance distribution with primary use as a firewall. With IPFire comes enterprise-grade network protection for everyone from home networks to large enterprises, school networks and government agencies. Special focus is placed on security, stability and ease of use. Additional functions can be installed with just one click.

Security

The main focus of IPFire is on security. Especially with such an extensive topic, there is not only one way to achieve a maximum level of security. It is at least as important for the network administrator to understand their needs and act accordingly. IPFire provides a basis for this purpose, which divides individual network segments according to their security levels and allows them to be subsequently adapted according to their own requirements.

Equally high priority is given to the security of the modular components. Updates are digitally signed, encrypted and can be automatically installed via the Pakfire package management system. Typically, IPFire is directly connected to the internet, making it a target for hackers and other threats. The package management system helps the administrator to be sure that all important gaps are plugged and bugs are fixed in all deployed components.

Firewall

IPFire uses a stateful packet inspection (SPI) firewall based on the Linux packet filtering framework netfilter. During the IPFire installation process, the network is divided into several separate segments. This security scheme implies a perfect fit for each system on the network. Each segment can be switched on as needed, depending on the location and purpose, and all systems in a segment are treated with the same security policy.

Scope of delivery:

1x server system
1x 16 GB mSATA SSD with pre-installed IPFire software
1x 12 V power supply unit
1x network cable (1 m)
1x housing

CPU: AMD Embedded G Series GX-412TC, 1 GHz Quad Jaguar core with 64-bit and AES-NI support, 32K data + 32K instruction cache per core, shared 2 MB L2 cache
DRAM: 4 GB DDR3-1333 DRAM
Storage: boot from SD card (internal sdhci controller), external via USB or m-SATA SSD, 1x SATA + power connector, mSATA shared with miniPCI Express
12 V DC, approx. 6 to 12 W depending on CPU load, socket = 2.5 mm, centre positive
Connectivity: 4x Gigabit Ethernet channels (Intel i211NIC)
I/O: serial DB9 interface, 2x USB 3.0 external + 2x USB 2.0 internal, 3x LEDs on the front, push-buttons
Expansion: 3x miniPCI express (J13 USB or mSATA, with SIM; J14 USB only, with SIM; J15: miniPCI express, but no SIM, intended for WLAN). GPIO header, optional I2C bus, COM2 (3.3 V RXD/TXD)
Board size: 6 x 6" (152.4 x 152.4 mm) - like APU1D, ALIX2D13 and WRAP1E
Firmware: coreboot
Cooling: conductive cooling from CPU to case with 3 mm aluminium heat spreader (included)