The Best Damn Firewall Book Period 

1 2 3 4 5

• 1. Table of Contents

• 2. BackCover

• 3. The Best Damn Firewall Book Period

• 4. Foreword

  Audience

• 5. Acknowledgments

  Acknowledgments

• 6. Part I: Introduction to Network Security Firewalls

  Chapter List

• 7. Chapter 1: Introduction to Information Security

  Introduction

• 8. Insecurity and the Internet

  Insecurity and the Internet Defining Information Security Common Information Security Concepts Knowledge Is Power Think Like a Thief Removing Intrusion Opportunities

• 9. Threats and Attacks

  Threats and Attacks Physical Security Network Security Understanding Intruder Motivations Categorizing Security Solutions Back to Basics: TCPUDP Well-Known Ports Classifying Specific Types of Attacks

• 10. Security Policies

• 11. Creating a Security Policy

• 12. Protecting Information Technology

  Protecting Information Technology Improving Security

• 13. Using SSL and Secure Shell

  Using SSL and Secure Shell Testing Security

• 14. Other Hardware Security Devices

  Other Hardware Security Devices Monitoring Activity Preventing Unauthorized External Intrusions and Attacks

• 15. Summary

  Summary

• 16. Chapter 2: Firewall Concepts

  Introduction

• 17. Defining a Firewall

  Defining a Firewall Types of Firewalls

• 18. Networking and Firewalls

  Networking and Firewalls Firewall Interfaces: Inside Outside and DMZ Firewall Policies Address Translation Virtual Private Networking

• 19. Popular Firewalls

  Popular Firewalls Hardware-Based Firewalls Firewall Software

• 20. Summary

  Summary

• 21. Chapter 3: DMZ Concepts, Layout, and Conceptual Design

  Introduction

• 22. DMZ Basics

  DMZ Basics DMZ Concepts Traffic Flow Concepts Networks with and without DMZs

• 23. DMZ Design Fundamentals

  DMZ Design Fundamentals Why Design Is So Important Designing End-to-End Security for Data Transmission between Hosts on the Network Traffic Flow and Protocol Fundamentals Designing for Protection in Relation to the Inherent Flaws of TCPIPv4 Public and Private IP Addressing Ports Using Firewalls to Protect Network Resources Traffic and Security Risks

• 24. Advanced Risks

  Advanced Risks Business Partner Connections Web and FTP Sites E-Mail Services

• 25. Advanced Design Strategies

  Advanced Design Strategies Advanced DMZ Design Concepts DMZ High Availability and Failover

• 26. Summary

  Summary

• 27. Chapter 4: Introduction to Intrusion Detection Systems

  Introduction

• 28. What Is Intrusion Detection?

  What Is Intrusion Detection? Network IDS Host-Based IDS Distributed IDS

• 29. What Is an Intrusion?

  What Is an Intrusion?

• 30. Why Are Intrusion Detection Systems Important?

  Why Are Intrusion Detection Systems Important? Why Are Attackers Interested in Me? Where Does an IDS Fit with the Rest of My Security Plan? Doesn t My Firewall Serve as an IDS? Where Else Should I Be Looking for Intrusions?

• 31. What Else Can Be Done with Intrusion Detection?

  What Else Can Be Done with Intrusion Detection? Monitoring Database Access Monitoring DNS Functions E-Mail Server Protection Using an IDS to Monitor My Company Policy

• 32. Summary

  Summary

• 33. Part II: Solaris Linux Firewalls

  Chapter List

• 34. Chapter 5: Implementing a Firewall with Ipchains and Iptables

  Introduction

• 35. Understanding the Need for a Firewall

  Understanding the Need for a Firewall Building a Personal Firewall

• 36. Deploying IP Forwarding and Masquerading

  Deploying IP Forwarding and Masquerading Masquerading

• 37. Configuring Your Firewall to Filter Network Packets

  Configuring Your Firewall to Filter Network Packets Customized Packet Filtering Configuring the Kernel

• 38. Understanding Tables and Chains in a Linux Firewall

  Understanding Tables and Chains in a Linux Firewall Built-In Targets and User-Defined Chains Using Ipchains to Masquerade Connections Using Iptables to Masquerade Connections

• 39. Logging Packets at the Firewall

  Logging Packets at the Firewall Setting Log Limits Adding and Removing Packet Filtering Rules Redirecting Ports in Ipchains and Iptables

• 40. Configuring a Firewall

  Configuring a Firewall Setting a Proper Foundation

• 41. Counting Bandwidth Usage

  Counting Bandwidth Usage Listing and Resetting Counters

• 42. Using and Obtaining Automated Firewall Scripts and Graphical Firewall Utilities

  Using and Obtaining Automated Firewall Scripts and Graphical Firewall Utilities Weighing the Benefits of a Graphical Firewall Utility Firewall Works in Progress

• 43. Summary

  Summary

• 44. Chapter 6: Maintaining Open Source Firewalls

  Introduction

• 45. Testing Firewalls

  Testing Firewalls IP Spoofing Open PortsDaemons Monitoring System Hard Drives RAM and Processors Suspicious Users Logins and Login Times Check the Rules Database Verify Connectivity with Company Management and End Users Port Scans

• 46. Using Telnet, Ipchains, Netcat, and SendIP to Probe Your Firewall

  Using Telnet Ipchains Netcat and SendIP to Probe Your Firewall Ipchains Telnet Netcat SendIP: The Packet Forger

• 47. Understanding Firewall Logging, Blocking, and Alert Options

  Understanding Firewall Logging Blocking and Alert Options Firewall Log Daemon fwlogwatch Automating fwlogwatch Using fwlogwatch with CGI Scripts

• 48. Obtaining Additional Firewall Logging Tools

  Obtaining Additional Firewall Logging Tools

• 49. Summary

  Summary

• 50. Chapter 7: Configuring Solaris as a Secure Router and Firewall

  Introduction

1 2 3 4 5