I think they say it best themselves. http://www.ipcop.org/
"The IPCop Firewall is a Linux firewall distribution. It is geared towards home and SOHO users. The IPCop web-interface is very user-friendly and makes usage easy."
Take a look at pfsense instead
IPCop: http://www.ipcop.org/ -- Purely boundary defense firewall. Also has the ability to function as a VPN bridge. Pretty easy to set up -- it has a web GUI but can be configured via command line as well. However, it uses Kernel version 2.4 and may not be compatible with non-internal NICs, such as USB-powered NICs.
In reality, though, any distro can be used. Most distros have the ability to install without a GUI and operate off of IPTables/IPChains. The fundamental design of these systems will operate regardless of the flavor you use.
There are a couple of approaches you can try.
My setup is
[1] Hardware router from ISP (too lazy to do anything here but lock out wifi and put to max security for everything except device #2 which has all traffic routed there unfiltered.
[2] PC-Linux router using ipCop which gives incredible security and flexibility. Look at the features here
[3] On the green line (trusted devices with internet permissions) I run WiFi for the family and all hard wired connections around the house.
[4] On the blue line (less trusted devices with much filtering) home wifi for friends which also gives wifi to the church next door. (filtered and blocked from accessing green line)
[5] Orange (DMZ TOR exit node)
I'd hit up the IPCOP support channels: http://www.ipcop.org/support.php You're not likely to find anyone familiar with that product here.
I'd also add that it hasn't had a new release since 2015, and its SVN was last updated in June. That isn't always bad for OSS projects but this is a firewall. A firewall. For security and stuff. There's probably been at least one or two critical flaws identified in the packages used since then.
I get this is for a school project so maybe you don't care, but I wouldn't use it.
Nail on the head Mr. Accoount, nail on the head.
It IS more work... true. But once it's set up.. heh, not THAT much more.
Ok, certainly nothing for my granny to mess with, unless I set up a 1 button skript for updates. (which I'd do anyway, and you too it sounds like)
edit: ever hear of IPCop? beautiful little dedicated firewall / router distro based on Smoothwall.
Have set this thing up for a lot of smaller companies. Takes minimal hardware and costs next to nothing.
for ARM hardware there is always the very stable and well supported OpenWRT.
A router with packet shaping/filtering will be much more expensive than setting up an old PC as a proxy. I would suggest checking out PF Sense (http://www.pfsense.org/) for a good router/firewall with some proxy/filtering capabilities. I have also used IPCop for web filtering (http://www.ipcop.org/) and it offers detailed packet shaping/filtering and has a nice web interface. I would recommend installing x2 gigabit NIC's on this machine if possible just to be sure it will handle the network traffic without bogging everything down. I should also mention you will need to be comfortable with using Linux/FreeBSD in order to get Pf Sense or IPCop up and running.
For the newbs, one of the more mind boggling advantages of Linux(and alike) is that someone or more likely many someones have already had, and cleverly solved, the issues you face now.
1) $50 thriftstore computer + IPCOP = Cheap, effective, easy Firewall.
2) -or- ClearOS will do slightly more and may integrate better with any windows boxes you may have.
3) If you're set on iptables, well, that's easy too.
IPCop on old x86 hardware. A great way to re-use old hardware that is not powerful enough for desktop usage anymore. You'll need an access point or a wireless router set to access point mode if you want wireless networking, and at least two Ethernet ports, three if doing wifi and wired network.
Lo mejor es poner un proxy. Yo siempre use squid, pero me dijeron que ipcop es mas fácil de implementar: http://www.ipcop.org/2.0.0/es/admin/html/services-urlfilter.html
Sino, me imagino, pero no estoy seguro, que con un router mikrotik se puede
A router with packet shaping/filtering will be much more expensive than setting up an old PC as a proxy. I would suggest checking out PF Sense (http://www.pfsense.org/) for a good router/firewall with some proxy/filtering capabilities. I have also used IPCop for web filtering (http://www.ipcop.org/) and it offers detailed packet shaping/filtering and has a nice web interface. I would recommend installing x2 gigabit NIC's on this machine if possible just to be sure it will handle the network traffic without bogging everything down. I should also mention you will need to be comfortable with using Linux/FreeBSD in order to get Pf Sense or IPCop up and running.