Linux Firewalls: Attack Detection and Response

Make no mistake, this book is on what it says it's about "Attack Detection and Response with iptables, psad, and fwsnort" it contains very little information about setting up iptables to block unwanted external traffic.HOWEVER setting up iptables (in the basic sense) doesn't require an entire book. Sure there are whole books on that topic but there is no need for a 300 page book on it, that just seems to be the size computer books have to be in order to get published. Which means other books on iptables are probably going to about 250 pages of fluff.Incidentally this book actually only spends about the first 35 pages describing that, the remainder is fantastic, useful, well written information about doing the things that make iptables truly useful. "detection and response" ACTIVELY securing your system.In addition to being comprehensive and useful this book happens to be well written, far better than most technical books.If you're thinking about buying a book on Linux firewalls, make it this one, but if you're not already familiar with iptables expect to read the first 35 pages, then a couple online tutorials and then come back to this book.

Who needs a specialist distro or Vyatta? Get this book and you'll be up and running in no time. I thought the content was presented in a logical manner, concise, clear and very informative. From IPTables novice to expert, there is a lot of good information in this book. If you want to understand the inner-workings of firewall based distros or products like Vyatta - or Brocade, whatever they call themselves these days - this is a good start. It introduces IPS/IDS basics, how to configure adaptive firewalls, and following the examples you will have the ability to set up a good, secure firewall in no time. I certainly recommend this book to anyone looking to get into the security field as well.

A must have! There are not so many books on Linux Firewalls!

There are lots of great examples in this book. I like the logging coverage. I've tuned my logging to make it easy to find unauthorized attempts.

Information can be found Online, but the book is an easy reference, and brings the Linux firewalls all together as a guide to the various firewalls.

outstanding server as well as the material inside.

A solid approach to protect your Linux or Network devices from intruders. I would recommend it for everyone who is serious about protecting their Network.

Get this book. Do as it suggests, and you'll be shocked at how many burglers are constantly knocking at your door.

This book doesn't really provide much of an insight into the concepts of Linux firewalls, although Figure 1-1 is helpful.

Il libro spiega come configurare correttamente le iptables, facendo degli esempi pratici in un'architettura di rete composta da più host.Dà per scontato che voi sappiate quali siano i parametri delle iptables: -j, -A, ecc... ma li imparate in 2 secondi cercandoli su google o leggendo l'help ("iptables --help").Nel tempo il linguaggio delle iptables è un po' cambiato rispetto al 2007, tutti gli esempi che presentano "-m state --state" andranno tradotti in "-m conntrack --ctstate".Nel sito del libro potete comunque osservare gli esempi aggiornati: cipherdyne.org/LinuxFirewallsDavvero ben fatto, consigliato.

excellent

A la recherche d'un outil de détection d'intrusion léger, j'ai finalement installé PSAD. C'est comme ca que je suis arrivé à ce livre.M.RASH est une référence dans le domaine de la sécurité et du filtrage de paquets en particulier.Le livre est excessivement bien fait, avance progressivement en partant d'une configuration de parefeu simple pour aller vers l'inspection de niveau applicatif, en expliquant clairement chaque étape.Sans être expert en système, il faut un peu deconnaissance sur le fonctionnement des parefeu et de Linux pour appécier ce livre.Avec ce livre, vous allez (re)découvrir la puissance de netfilter !