Amazon.co.uk Review
TCP/IP packet handling may sound crystal clear when you first hear it, but after you've configured your ethernet card's netmask address, the details become rather remote. You might find yourself asking--if you were a Danish prince--"What is a packet, if its chief good and market of its time be but to route and wrap?" If routing and wrapping were all packets did, we would all enjoy our ignorance blissfully. But packets--like men, as the prince learned--can be hollow carriers of ill will, and excluding the bad ones requires us to understand what they really, truly are. At last.
Just how interesting packets turn out to be is revealed in Linux Firewalls, Robert L. Zeigler's sober, agile and subtle text. Narrowing consideration to threats faced by small networks from external sources, Zeigler and his editors introduce security by delivering pre-requisite tutorials on packet architecture and normal, network-based client-server daemon-to-daemon communications. Non-threatening daemon-to-daemon communication is part of the regular operation of a networked, POSIX-compliant operating system (like Linux or NT), but the incessant background chatter makes finding hostile intrusions a search for sometimes-subtle irregularities in a high throughput environment.
In fact, bombardment of networks with useless packets can create diversions for more pernicious attacks. Telling the good packets from the potentially hostile or merely useless packets requires levels of filtering criteria that depend on the specifics of the network environment. Zeigler sorts out all of these issues and outlines practical network administration strategies for packet filtering.
Linux Firewalls is a how-to for the home Linux box, including the creating and debugging firewall rules for home LANs and network interfaces. For larger LAN users, Zeigler describes intrusion logging, configurations based on varying levels of trust, and the how, why and when of reporting intrusions to network authorities.
In the wrong hands, firewall reports are either hyped-up cloak-and-dagger sensationalism or monotonous treatises in bitwise accounting. Zeigler strikes a middle ground with a book fit for members of the Linux community who are curious about what is happening over their TCP/IP connections. These are folks who have the prowess to build kernel releases on their own, but who aren't necessarily wonks at developing kernel or device driver sources. --Peter Leopold, Amazon.com
--This text refers to an out of print or unavailable edition of this title.
Book Description
The book for Linux users wishing to implement a secure Linux firewall.
Updating the highly successful first edition to cover the Linux 2.4 kernel.
Authored Robert Ziegler is a router security architect who is well respected in the Open Source community as a firewall expert.
Includes extensive coverage of iptables, the biggest additional change to the 2.4 kernel. An Internet-connected Linux machine is in a high-risk situation. This book details security steps that a home or small-to-mid-size, non-enterprise business might take to protect itself from potential remote attackers. As with the first book, this book will provide a description of the need for security measures and solutions built upon the most up-to-date technology available. Linux Firewalls, Second Edition has been updated to cover the 2.4 kernel and additional chapters on VPNs, SSH, and Tripwires have been added.Robert Ziegler is a router security architect. Until recently he worked for Nokia, designing firewall products for Nokia's future product families. In his spare time Bob offers free Web-based firewall design services for the home user, as well as a popular LAN and Firewall FAQ to help people quickly get their Linux systems set up securely. He has worked as a UNIX operating system developer for various research and development companies. Bob wrote the very successful first edition of this book, Linux Firewalls, ISBN- 0-7357-0900-9.
Carl Constaintine, contributing author, has worked in the computer industry for many years. He's been a programmer, consultant, technical writer and troubleshooter. He currently works at the University of Victoria as a Programmer Analyst/Unix System Administrator for the Deptartment of Computer Science.
See all Product Description
(13)
£23.08
(3 customer reviews)
(
