Linux Firewalls, 2/e

Robert Ziegler

Linux Firewalls, 2/e
  • 出版商: New Riders
  • 出版日期: 2001-10-24
  • 售價: $2,000
  • 貴賓價: 9.5 折 $1,900
  • 語言: 英文
  • 頁數: 592
  • 裝訂: Paperback
  • ISBN: 0735710996
  • ISBN-13: 9780735710993
  • 相關分類: Linux

    • 已過版

買這商品的人也買了...

商品描述

An Internet-connected Linux machine is in a high-risk situation. This book details security steps that a home or small-to-mid-size, non-enterprise business might take to protect itself from potential remote attackers. As with the first edition, this book will provide a description of the need for security measures and solutions built upon the most up-to-date technology available. The content for the Second Edition has been updated to cover the 2.4 kernel, and additional chapters on VPNs, SSH, and Tripwires have been added.

Table of Contents

I. PACKET FILTERING AND BASIC SECURITY MEASURES.

1. Preliminary Concepts Underlying Packet-Filtering Firewalls.
The TCP/IP Reference Networking Model. IP Addresses. Routing: Getting a Packet from Here to There. Service Ports: The Door to the Programs on Your System. Packets: IP Network Messages.

2. Packet-Filtering Concepts.
A Packet-Filtering Firewall. Choosing a Default Packet-Filtering Policy. Rejecting Versus Denying a Packet. Filtering Incoming Packets. Filtering Outgoing Packets. Private versus Public Network Services.

3. iptables: The Linux Firewall Administration Program.
Differences Between IPFW and Netfilter Firewall Mechanisms. iptables Features. iptables Syntax.

4. Building and Installing a Standalone Firewall.
iptables: The Linux Firewall Administration Program. Initializing the Firewall. Protecting Services on Assigned Unprivileged Ports. Enabling Basic, Required Internet Services. Enabling Common TCP Services. Enabling Common UDP Services. Filtering ICMP Control and Status Messages. Logging Dropped Incoming Packets. Logging Dropped Outgoing Packets. Denying Access to Problem Sites Up Front. Installing the Firewall.

II. ADVANCED ISSUES, MULTIPLE FIREWALLS, AND PERIMETER NETWORKS.

5. Firewall Optimization.
Rule Organization. User-Defined Chains. Optimized Example. What Did Optimization Buy?

6. Packet Forwarding.
The Limitations of a Standalone Firewall. Basic Gateway Firewall Setups. LAN Security Issues. Configuration Options for a Trusted Home LAN. Configuration Options for a Larger or Less Trusted LAN. A Formal Screened-Subnet Firewall. Converting the Gateway from Local Services to Forwarding.

7. NAT-Network Address Translation.
The Conceptual Background of NAT. iptables NAT Semantics. Examples of SNAT and Private LANs. Examples of DNAT, LANs, and Proxies.

8. Debugging the Firewall Rules.
General Firewall-Development Tips. Listing the Firewall Rules. Checking the Input, Output, and Forwarding Rules. Checking for Open Ports. Debugging SSH: A Real-Life Example.

III. SYSTEM-LEVEL SECURITY AND MONITORING.

9. Verifying That the System Is Running as You Expect.
Checking the Network Interfaces with ifconfig. Checking the Network Connection with ping. Checking Network Processes with netstat. Checking a Process Bound to a Particular Port with fuser. Checking All Processes with ps -ax. Interpreting the System Logs.

10. Issues at the UNIX System Administration Level.
Authentication: Verifying Identity. Authorization: Defining Access Rights to Identities. Server-Specific Configuration. SOCKS: An Application-Level Proxy Firewall. Miscellaneous System Accounts in /etc/passwd, /etc/shadow, and /etc/group. Setting Your PATH Variable. /etc/issue.net. Remote Logging. Keeping Current with Software Upgrades.

11. Secure Shell (SSH).
Installing SSH. Generating SSH Keys. Using SSH. Customizing Your SSH Configuration. Secure Copy (scp).

12. Tripwire.
Tripwire Overview. Installing Tripwire. Looking at How Tripwire Works. Configuring Tripwire. Using Tripwire. Tripwire Tips and Tricks.

13. Intrusion Detection and Incident Reporting Software.
Intrusion-Detection Software. Symptoms Suggesting That the System Might Be Compromised. What to Do if Your System Is Compromised. Incident Reporting.

IV. APPENDIXES.

Appendix A. Security Resources.
Security Information Sources. Software Collections. Security Tools. Firewall Tools. Reference Papers and FAQs. General Web Sites. Books.

Appendix B. Firewall Examples and Support Scripts.
iptables Firewall for a Standalone System from Chapter 4. Optimized iptables Firewall from Chapter 5. iptables Firewall for a Choke Firewall from Chapter 6. Special Purpose Support Scripts. DHCP and pump: Firewall Support with a Dynamic IP Address and Name Servers.

Appendix C. VPN.
Overview of Virtual Private Networks (VPN). Types of VPN. VPN Protocols. Linux and VPN Products. VPN Configurations. Connecting Networks. VPN and Firewalls.

Appendix D. Glossary.
Index.

類似商品