Linux Iptables Pocket Reference
Seiten
2004
O'Reilly Media (Verlag)
978-0-596-00569-6 (ISBN)
O'Reilly Media (Verlag)
978-0-596-00569-6 (ISBN)
Organizing the subtle netfilter syntax for quick and easy lookup, this reference helps administrators remember all the values they need to enter to assure strict security. The text divides the listings of all iptables options into those that are suitable for firewalling, accounting, and Network Address Translation (NAT).
Firewalls, Network Address Translation (NAT), and network logging and accounting are all provided by Linux's Netfilter system, also known by the name of the command used to administer it, iptables. The iptables interface is the most sophisticated ever offered on Linux and makes Linux an extremely flexible system for any kind of network filtering you might do. Large sets of filtering rules can be grouped in ways that makes it easy to test them and turn them on and off. Do you watch for all types of ICMP traffic--some of them quite dangerous? Can you take advantage of stateful filtering to simplify the management of TCP connections? Would you like to track how much traffic of various types you get? This pocket reference will help you at those critical moments when someone asks you to open or close a port in a hurry, either to enable some important traffic or to block an attack. The book will keep the subtle syntax straight and help you remember all the values you have to enter in order to be as secure as possible. The listings of all iptables options are divided into those suitable for firewalling, accounting, and NAT.
Firewalls, Network Address Translation (NAT), and network logging and accounting are all provided by Linux's Netfilter system, also known by the name of the command used to administer it, iptables. The iptables interface is the most sophisticated ever offered on Linux and makes Linux an extremely flexible system for any kind of network filtering you might do. Large sets of filtering rules can be grouped in ways that makes it easy to test them and turn them on and off. Do you watch for all types of ICMP traffic--some of them quite dangerous? Can you take advantage of stateful filtering to simplify the management of TCP connections? Would you like to track how much traffic of various types you get? This pocket reference will help you at those critical moments when someone asks you to open or close a port in a hurry, either to enable some important traffic or to block an attack. The book will keep the subtle syntax straight and help you remember all the values you have to enter in order to be as secure as possible. The listings of all iptables options are divided into those suitable for firewalling, accounting, and NAT.
Gregor N. Purdy is a consultant, author, trainer, and lecturer on large-scale decision support system requirements, design, and implementation. He is also the author of various Perl modules and the Perl Shell. He uses CVS to manage his personal projects and those of his clients. He is also a contributor to the Comprehensive Perl Archive Network (CPAN) and to the ongoing development of the new Perl 6 virtual machine, Parrot.
| Erscheint lt. Verlag | 28.9.2004 |
|---|---|
| Reihe/Serie | Pocket Reference (O'Reilly) |
| Verlagsort | Sebastopol |
| Sprache | englisch |
| Einbandart | kartoniert |
| Themenwelt | Informatik ► Betriebssysteme / Server ► Unix / Linux |
| ISBN-10 | 0-596-00569-5 / 0596005695 |
| ISBN-13 | 978-0-596-00569-6 / 9780596005696 |
| Zustand | Neuware |
| Haben Sie eine Frage zum Produkt? |
Mehr entdecken
aus dem Bereich
aus dem Bereich
