|
Now
more than ever, Firewalls are needed not only for business but also
for the home. In the days of residential dial-up Internet access,
Firewall protection was not a necessity because you would have to
dial-in and then disconnect a modem with a 28.8 - 56k connection
speed. Today with high speed residential Internet access, computers
are connected to the Internet 24/7 via cable modems and xDSL, this
can be highly detrimental for an unprotected system.
In
a Packet
Linux Firewalls
is a valuable addition to your Network Security Library, from a
knowledgeable newbie Linux user to the versed expert, this book
covers all the bases. One of the great benefits of
this book is how Robert has structured the information, he does
not simply tell how to do something, but rather gives a conceptual
visual representation of a scenario, explains the vulnerabilities
and how to secure them and all with the supporting command syntax.
Another great benefit is that all the mini script examples in Linux
Firewalls are all set up with global variables, meaning, by changing
one part of the script the rest of the script does not need to be
changed. This can be very handy when dynamic content needs to be
assigned to certain variables like an ethernet adapter with a Dynamic
IP Address. With the script examples you can get all your services
and rules in place for the start of your Firewall. Linux Firewalls
has setups including multiple segmented Firewalls with multiple
subnets and DMZ zones, choke Firewalls, etc. Some of the configurations
are not for the faint at heart or the impatient, but be assured
if you follow this books lead you are sure to have a killer Firewall
inplace.
Linux
Firewalls has gone through the steps of getting your services secured,
networks defined and your policy rules set, it also goes through
the good practices of running the Firewall to make sure old policies
are flushed and new policies are loaded correctly. Some of these
practices include using built-in (built-in Linux shell commands)
tools for listing ipchains rules, monitoring specific network interface
tcp & udp port connection states and listing and modifying the
system's tcp/ip routing configuration. This is essential information
when it comes time to configure monitors or alarms that you may
want to setup on your Firewall and also for quick snap shot views
of what is happening on your network..
To
make everything complete, Linux Firewalls finishes up superbly by
going over Intrusion Detection Reporting and System Integrity Checks.
A Firewall needs to have the ability to log anything and everything,
and if a problem arises the Firewall administrator needs to know
immediately. Robert explains how the reporting should be done and
also why!
As an extra,
Linux Firewalls Appendixes include Security Resources with links
to their web sites in which contain security tools, Firewall Examples
with the supporting scripts (text scripts - NO CD included) and
also a healthy glossary of Networking, Firewalling and Security
terms and definitions.
All
in All, Robert Ziegler has put together an excellent book from start
to finish in the wonderful word Linux Firewall Securities.
For more information
on Linux Firewalls and Securities visit Roberts Site at: http://www.linux-firewall-tools.com/linux/
|