bookmate game
Books
Lucian Gheorghe

Designing and Implementing Linux Firewalls and QoS using netfilter, iproute2, NAT and L7-filter

In DetailFirewalls are used to protect your network from the outside world. Using a Linux firewall, you can do a lot more than just filtering packets. This book shows you how to implement Linux firewalls and Quality of Service using practical examples from very small to very large networks.After giving us a background of network security, the book moves on to explain the basic technologies we will work with, namely netfilter, iproute2, NAT and l7-filter. These form the crux of building Linux firewalls and QOS. The later part of the book covers 5 real-world networks for which we design the security policies, build the firewall, setup the script, and verify our installation. Providing only necessary theoretical background, the book takes a practical approach, presenting case studies and plenty of illustrative examples.
This practical guide teaches you how to implement effective network protection by using your own customized firewall solution. Based on extensive practical experience, this book distills a unique set of scenario based scripts and guidelines for a proven firewall solution, into one succinct and precise book.
ApproachThe author draws on his experience to offer the reader valuable advice on the best practices.  Providing only necessary theoretical background, the book takes a practical approach, presenting case studies and plenty of illustrative examples.
Who this book is forThis book is aimed at Linux Network administrators with some understanding of Linux security threats and issues, or any one interested in securing their systems behind a firewall. Basic knowledge of Linux is presumed but other than that this book shows you how to do the rest, from configuring your system to dealing with security breaches.
360 printed pages
Publication year
2006
Have you already read it? How did you like it?
👍👎

Quotes

  • ritahuhas quoted3 years ago
    The first command shows the backlog size of 1024, and the second command sets it to 2048.

    The default Linux Kernel behavior is to discard new SYN packets if the queue is full.
  • ritahuhas quoted3 years ago
    can use iptables to protect against SYN flooding by limiting the number of SYN packets in a defined amount of time, as we did for ICMP
  • ritahuhas quoted3 years ago
    very large number of SYN packets without regarding the SYNACK the attacked host sends back. This type of attack is called TCP SYN attack or SYN flooding .

On the bookshelves

fb2epub
Drag & drop your files (not more than 5 at once)