Linux Firewalls |
 |
 click here for more details, find new or used items |
Steve Suehring, Robert Ziegler
|
|
Pages: 552 (Paperback)
ISBN: 0672327716
Pub: Novell Press
Pub date: 2005-09-22
Amazon.co.uk Sales Rank: 171101
Editorial Review:
TCP/IP packet handling may sound crystal clear when you first hear it, but after you've configured your ethernet card's netmask address, the details become rather remote. You might find yourself asking--if you were a Danish prince--"What is a packet, if its chief good and market of its time be but to route and wrap?" If routing and wrapping were all packets did, we would all enjoy our ignorance blissfully. But packets--like men, as the prince learned--can be hollow carriers of ill will, and excluding the bad ones requires us to understand what they really, truly are. At last.
Just how interesting packets turn out to be is revealed in Linux Firewalls, Robert L. Zeigler's sober, agile and subtle text. Narrowing consideration to threats faced by small networks from external sources, Zeigler and his editors introduce security by delivering pre-requisite tutorials on packet architecture and normal, network-based client-server daemon-to-daemon communications. Non-threatening daemon-to-daemon communication is part of the regular operation of a networked, POSIX-compliant operating system (like Linux or NT), but the incessant background chatter makes finding hostile intrusions a search for sometimes-subtle irregularities in a high throughput environment.
In fact, bombardment of networks with useless packets can create diversions for more pernicious attacks. Telling the good packets from the potentially hostile or merely useless packets requires levels of filtering criteria that depend on the specifics of the network environment. Zeigler sorts out all of these issues and outlines practical network administration strategies for packet filtering.
Linux Firewalls is a how-to for the home Linux box, including the creating and debugging firewall rules for home LANs and network interfaces. For larger LAN users, Zeigler describes intrusion logging, configurations based on varying levels of trust, and the how, why and when of reporting intrusions to network authorities.
In the wrong hands, firewall reports are either hyped-up cloak-and-dagger sensationalism or monotonous treatises in bitwise accounting. Zeigler strikes a middle ground with a book fit for members of the Linux community who are curious about what is happening over their TCP/IP connections. These are folks who have the prowess to build kernel releases on their own, but who aren't necessarily wonks at developing kernel or device driver sources. --Peter Leopold, Amazon.com
Reader Reviews:
Excellent for medium to large systems, ropey for home LANs (8/8 people found this helpful)
First of all I note that the current reviews before this one seem to be the old ipchains book, which I presume is really totally different, as this book deals with iptables for the 2.4 kernel.
I bought this book to help me firewall a domestic LAN system. The book is beautifully detailed and I think it would be invaluable in setting up an excellent firewall for a medium sized business. However, I found it less helpful for dealing with a firewall on a machine masquerading for a LAN. The scripts use many constants simply not known to such users that are often allocated dynamically. In addition the listings are long and it's tedious to have to type in pages of suggested material just to get started developing your required changes. Finally the scripts have errors in them with constant names changing from one location to another, just to make things a bit more ackward.
Actually let us set up a Linux DMZ firewall (5/5 people found this helpful)
This book allowed us set up a 2 level firewall, with central logging and administration, and maintain it ourselves. Its worth the price of admission, but it is not an easy topic nor an easy read.
Brilliant (3/4 people found this helpful)
A real good resource if you want to install a packet filtering Firewall via ipchains. The whole topic is explained in depth but also understandable for the beginner in Firewalling. Robert Ziegler did write all his passion in Security and Firewalling down in this book. Real life examples make it easy to build your own Firewall for all purposes. The book is very well structured and this structure is also visible in the Rulesets. Robert Ziegler was obviously invlolved in the Managment of larger to real huge Networks. He knows how to make an ADministrators life easy.
Great resource.
Similar Products
Linux iptables Pocket Reference (Pocket Reference (O'Reilly))
Classic Shell Scripting: Hidden Commands that Unlock the Power of Unix
Linux Firewalls Troubleshooting (Addison Wesley Professional)
Categories
Amazon.co.uk places this book into the following categories:
Books -> Subjects -> Computers & Internet -> Networking & Security -> Security -> Firewalls
Books -> Subjects -> Computers & Internet -> General
Books -> Subjects -> Computers & Internet -> UNIX & Linux
Books -> Subjects -> Computers & Internet -> Databases -> Database Design & Theory
Books -> Subjects -> Computers & Internet -> Digital Lifestyle -> Online Shopping -> Amazon
Books -> Refinements -> Language (feature_browse-bin) -> English
Books -> Refinements -> Age (feature_two_browse-bin)
Books -> Refinements -> Format (binding_browse-bin) -> Paperback
Books -> Refinements -> Condition (condition-type)