The Book of PF: A No-Nonsense Guide to the OpenBSD Firewall

石头

作者：Peter Hansteen
出版日期：January 11, 2008
出版社：其它
页数：184
ISBN：ISBN-10: 1593271654 ISBN-13: 978-1593271657
文件格式：PDF


Product Description
OpenBSD’s stateful packet filter, PF, offers an amazing feature setand support across the major BSD platforms. Like most firewall softwarethough, unlocking PF’s full potential takes a good teacher. Peter N.M.Hansteen’s PF website and conference tutorials have helped thousands ofusers build the networks they need using PF. The Book of PFis the product of Hansteen’s knowledge and experience, teaching goodpractices as well as bare facts and software options. Throughout thebook, Hansteen emphasizes the importance of staying in control byhaving a written network specification, using macros to make rule setsmore readable, and performing rigid testing when loading in new rules.
Today’s system administrators face increasing challenges in the quest for network quality, and The Book of PFcan help by demystifying the tools of modern *BSD network defense. But,perhaps more importantly, because we know you like to tinker, The Book of PF tackles a broad range of topics that will stimulate your mind and pad your resume, including how to:

• Create rule sets for all kinds of network traffic, whether it iscrossing a simple home LAN, hiding behind NAT, traversing DMZs, orspanning bridges
• Use PF to create a wireless access point, and lock it down tight with authpf and special access restrictions
• Maximize availability by using redirection rules for load balancing and CARP for failover
• Use tables for proactive defense against would-be attackers and spammers
• Set up queues and traffic shaping with ALTQ, so your network stays responsive
• Master your logs with monitoring and visualization, because you can never be too paranoid

The Book of PF is written for BSD enthusiasts and networkadmins at any level of expertise. With more and more services placinghigh demands on bandwidth and increasing hostility coming from theInternet at-large, you can never be too skilled with PF.
About the Author
Peter N. M. Hansteen is a consultant, writer and sysadmin based inBergen, Norway. A longtime Freenix advocate, Hansteen is a frequentlecturer on FreeBSD and OpenBSD topics. His expertise as adocumentation consultant (and humorous work with the RFC 1149implementation team) have helped him gain regard in Norwegian ITpublications. The Book of PF, Hansteen’s first book, is an expanded follow-up to his very popular online PF tutorial.