APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

© October 2007 Anthony Lawrence

Linux Firewalls


Index by Subject

  • 9781593271411
  • Prentice Hall
  • 9780132198576

Amazon Order (or just read more about) Linux Firewalls  from Amazon.com

Although the introduction says "This book assumes some familiarity with TCP/IP networking concepts", it actually requires a pretty fair familiarity. Do not make the mistake of assuming that this is some cookie cutter approach that's going to teach you a bit about iptables and give you some scripts you can slap into place and forget. There are books that do that, but this isn't one.

The subtitle is "Attack Detection and Response with iptables, psad and fwsnort". Michael Rash is the author of psad, fwknop, and fwsnort among other things, so you can trust he knows what he's talking about here.

This is much more about learning how attackers try to get in and developing the countermeasures to keep them out. As everyone keeps reminding you, security is a journey, not a destination: you never get to "secure", you just work at it incessantly.

As such, this is a good book - I'm not sure it's a "great book" as the foreword proclaims, but then I'm probably too stingy with my superlatives. It's also possible that I'm simply not well versed enough in this area to appreciate greatness when it falls into my grubby little hands.

Nevertheless, I enjoyed this, and if you do know enough about networking to do a bit more than set your box to "Obtain an IP address automatically", you might enjoy it also. Michael Rash is the developer of the Dragon IDS and you'll find his website at https://www.cipherdyne.org/.

Video at https://www.youtube.com/watch?v=aDdq0u5xIME

Tony Lawrence 2007-10-31 Rating: 4.0

Got something to add? Send me email.

(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> Linux Firewalls Attack Detection and Response with iptables, psad and fwsnort

1 comment

Inexpensive and informative Apple related e-books:

Photos for Mac: A Take Control Crash Course

iOS 8: A Take Control Crash Course

Digital Sharing Crash Course

Take Control of Apple Mail, Third Edition

El Capitan: A Take Control Crash Course

More Articles by © Anthony Lawrence

Thu Nov 1 13:55:29 2007: 3215   BigDumbDinosaur

It's interesting you reviewed this book, as I've yet to find anything about iptables that is worth the paper on which it is printed. What I know about iptables was gleaned from a painful discovery process, not by consulting some well-written tome (there aren't any on the subject).

Unfortunately, in the world of Linux, crappy documentation is the norm. For all the work and talent that has been applied to the OS itself, I'm amazed at how poorly it has been documented. Many man or info pages are an incomplete mess or are entirely missing. In some cases, man pages are obviously the product of someone who far more an expert at writing code than English prose. This whole situation is ironic, given that RTFM is often the response given to a newbie by Linux veterans. How do we expect anyone to RTFM when there isn't anything to read or what is available is incomplete?


Printer Friendly Version

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us

Printer Friendly Version

Zawinski's Law: Every program attempts to expand until it can read mail. Those programs which cannot so expand are replaced by ones which can. (Jamie Zawinski)

Linux posts

Troubleshooting posts

This post tagged:






Unix/Linux Consultants

Skills Tests

Unix/Linux Book Reviews

My Unix/Linux Troubleshooting Book

This site runs on Linode