Firewalling and system/network security is a huge subject. Table 11-3 shows some of the more useful sites and information that you can use to quickly get up to speed on the various topics in this chapter, as well as keep an eye on the industry and the latest security vulnerabilities and exploits by joining the included security mail lists.
Table 11-3: Firewall Resources
|
TCP/IP resources
|
|
|---|---|
|
Daryl's TCP/IP Primer
|
www.ipprimer.com/section.cfm
|
|
TCP: RFC793
|
|
|
IP: RFC791
|
|
|
Linux Firewall and Proxy Server HOWTO
|
www.tldp.org/HOWTO/Firewall-HOWTOl |
|
TCP wrapper resources
|
|
|---|---|
|
Red Hat Enterprise Linux Reference Guide
|
www.redhat.com/docs/manuals/enterprise/RHEL-3-Manual/ref-guide/ch-tcpwrappersl
|
|
Iptables resources
|
|
|---|---|
|
Red Hat Enterprise Linux Reference Guide
|
www.redhat.com/docs/manuals/enterprise/RHEL-3-Manual/ref-guide/ch-iptablesl
|
|
IP tables/IP Masquerading
|
http://mia.ece.uic.edu/~papers/WWW/iptablesl www.e-infomax.com/ipmasq/howto/ml/ipmasq-HOWTO-ml
|
|
Packet Filtering HOWTO
|
www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTOl
|
|
Iptables quick HOWTO
|
www.cse.msu.edu/~minutsil/iptablesl
|
|
Linux 2.4 NAT HOWTO
|
www.netfilter.org/documentation/HOWTO/NAT-HOWTOl
|
|
Netfilter Extensions HOWTO
|
www.netfilter.org/documentation/HOWTO/netfilter-extensions-HOWTOl
|
|
Firewall resources
|
|
|---|---|
|
Advanced policy firewall suite
|
www.r-fx.org/apf.php
|
|
iptables tables and chains
|
www.yolinux.com/TUTORIALS/LinuxTutorialIptablesNetworkGatewayl
|
|
Internet firewall FAQ
|
www.interhack.net/pubs/fwfaq/
|
|
Other resources
|
|
|---|---|
|
Red Hat Enterprise Linux Security Guide
|
www.redhat.com/docs/manuals/enterprise/RHEL-3-Manual/security-guide/ch-serverl
|
|
"Paranoid Penguin: Seven Top Security Tools"
|
www.linuxjournal.com/article.php?sid=7235
|
|
RFC 2647-Benchmarking Terminology for Firewall Performance
|
|
|
Red Hat Linux 9 Firewalls
|
www.redhat.com/docs/manuals/linux/RHL-9-Manual/ custom-guide/sl-basic-firewall-gnomelokkitl
|
|
RFC 2647-Benchmarking Terminology for Firewall Performance
| |
|
Sentry Tools Project (includes portsentry )
|
http://sourceforge.net/projects/sentrytools/
|
|
Daryl's TCP/IP Primer, Network Address Translation (NAT)
|
www.ipprimer.com/nat.cfm
|
|
"Battling hackers," Jim DeBrosse
|
www.crime-research.org/eng/news/2003/03/Mess1603l
|
|
Good security mail lists for sys-admins to join
|
CERT: www.cert.org/contact_cert/certmaillistl SecurityFocus: www.securityfocus.com/cgi-bin/forums.pl NTBugTraq: www.ntbugtraq.com Xforce: xforce.iss.net/maillists/index.php
|