---
title: IPCOP configuration
slug: legacy/ipcop-configuration
description: Unlock the full potential of your IPCOP router with our comprehensive step-by-step guide. This document details the essential process for configuring DNS settings and implementing robust security enhancements.
docTags: 
createdAt: 2024-01-25T12:56:38.960Z
---

## Filter Configuration on IPCO

<font color="#000000">If you have not yet registered for the service you can do so by clicking on the following link\: .</font>
Connect to the control panel by *entering the IP address of the IPCOP* in the address bar of any Browser.

**PLEASE NOTE**: Type the address as follows: *https\://IndirizzoIP:8443*.
Then **log** in by *entering your credentials*.

First you need to change the *DNS used by the IPCOP&#x20;*(RED Network).
To do this click on \[**System**], then open the \[**SSH Access**] menu.
Check the *SSH Access item* and click on the \[**Save**] button to apply the changes.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/bsEB9kYF_ZhsZwQ49whST_image.png" size="50" width="1343" height="257" position="center" caption="DNS Edit" alt="DNS edit menu" showCaption="true"}

To access the console, using the *SSH protocol*, you can use the Putty software <font color="#000000">()
</font>
Then open the Putty software and *enter the IP address of the IPCOP* (GREEN Network) inside the field and *8022 in the Port field*.
Then click on \[**Open**] to open the console.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/ObBI1ClJWGjV9HmgZ80M8_image.png" size="50" width="426" height="435" position="center" caption="Putty Software Configuration" alt=" Using SSH protocol via Putty software" showCaption="true"}

Log in with your root credentials and type the command setup.
Then click the enter key, and then a new page with a setup wizard will open.
Select the *Networking item* and click on the \[**Select**] button.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/yygxUsKAgI2TL4jsjCqXA_image.png" size="50" width="668" height="427" position="center" caption="Networking menu" alt="Log in with root credentials and select the Networking item" showCaption="true"}

Navigate to the *DNS and Gateway settings item* and click on the \[**Select**] button.
Enter the address *185.236.104.104* in the Primary DNS field and *185.236.105.105* in the *Secondary DNS field*.
Click on the \[**Ok**] button and wait for the network reconfiguration procedure to complete.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/zdrv_6c8fccOgsAYxzyh2_image.png" size="50" width="666" height="426" position="center" caption="DNS and Gateway Settings" alt="Gateway settings within the DNS entry" showCaption="true"}

You can then close the *Putty program*.
**PLEASE NOTE**: To check if the DNS have been set correctly click on \[**Status**], in the *IPCOP web panel*, and then open the \[**Network Status**] menu.
Look for the *Red DNS configuration item* and check if the DNS are the correct ones.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/CL5XwIp5ebSkh46c_Mz38_image.png" size="50" width="1332" height="134" position="center" caption="DNS Configuration" alt="Checking DNS after closing Putty" showCaption="true"}

At this point we need to configure IPCOP so that we can authenticate with our Servers.
Then open the \[**Services**] menu and then click on \[**Dynamic DNS**].
As the service, choose *dyndns.org*.
**IMPORTANT**: You do not need to be registered with the *dyndns.org service as our Servers redirect the request directly to themselves*.
Then click on the \[**Add**] button to proceed with the service configuration.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/vrS1zm-BhURXZhlEJen-n_image.png" size="50" width="1323" height="155" position="center" caption="IPCOP Configuration" alt="IPCOP Configuration from Dynamic DNS Menu" showCaption="true"}

Then configure it as follow

- **Enabled**: Check the item to enable the service.
- **Hostname**: Enter any name you like. For example, the word hostname.
- **Domain**: Enter a domain of your choice. For example domain.com.
- **Username**: Enter the email/username to register for the service.
- **Password**: Enter your password.

**PLEASE NOTE**: The password was emailed to the address specified when registering for the Cloud Filter.
Finally, click \[**Update]** to save.

Image Alt Text: At this point you can enable the DHCP Server so that it automatically assigns network parameters, including our DNS, to the various internal devices.
To configure the *DHCP Server*, open the \[**Services**] menu and then click on \[**DHCP Server**].
Fill in the various fields as follows:


- **Enabled**: Put a checkmark to enable the service.
- **Start address**: Enter the first IP address in the DHCP range.
- **End address**: Enter the last IP address of the DHCP range .
- **Default lease time (mins)**: Set the DHCP lease time (in minutes).
- **Primary DNS**: Enter the address 185.236.104.
- **Secondary DNS**: Enter the address 185.236.105.105.

Click on the \[**Save**] button to save the changes.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/0c_nkr6W4DASQ6p2tcVtd_image.png" size="50" width="1330" height="343" position="center" caption="Dhcp server configuration" alt="Configuring and enabling DHCP server" showCaption="true"}

Alternatively, the DNS of the various devices within the network can be changed manually.

## OPTIONAL: Deny DNS changes by users

It is possible to increase security by denying the user the ability to browse unfiltered, as a result of changing the DNS on their device.
To do this, proceed as follows:

- Open the \[**Firewall**] menu and click on \[**Firewall&#x20;**
- At this point you need to create rules to block all traffic on *port 53 (DNS Service)*, both *TCP and UDP*, except those directed to our IPs.

Then click on the \[**Outgoing Traffic**] button to create a new rule.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/qnUbZkqIvK9bOZhsJqgqd_image.png" size="50" width="1323" height="304" position="center" caption=" Firewall rules" alt="Blocking traffic on port 53 via Firewall rule" showCaption="true"}

See the image below to understand how to create the rule.
**PLEASE NOTE**: Enter the *IP 185.236.104.104* in the *Destination IP or Net: field*.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/xIpyPwA-z62aqoiiMYVNu_image.png" size="50" width="1332" height="623" position="center" caption="Denial of editing for the user" alt="Creating firewall rule to deny the user from changing DNS" showCaption="true"}

Then click \[**Save**] to add the rule.
Then create another rule, similar to the previous one, except the *Destination IP or Net: field must be 185.236.105.105*.

Finally, you need to create an additional rule with the purpose of blocking all traffic on *port 53 (DNS), both TCP and UDP*.
See the image below to understand how to create the rule.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/PRjCGbDKGcPFtAigM4qiV_image.png" size="50" width="1327" height="617" position="center" caption="New firewall rules" alt="Creating a new rule with Destination IP different from the one previously created" showCaption="true"}

**Other ways to ask**:

- How to configure IPCOP router.
- IPCOP router configuration. How to.