I said that I wouldn't comment on Rob Zeiglers book because I haven't read it.
However, from what you have described, the book is an extension of the utility
that he has on the web for building a firewall script. I was never a big fan of
the tool because it bloated the script with far to many things that didn't need to
be there. One problem that I am faced with now it trying to learn more about
ipchains ( I know the basics already, but there is a lot more detail that I would
like to know), and at the same time, gearing up for iptables in the 2.4 kernel.
Once again, the firewalling code is going to change, and I'm sure it has some
major benefits (like maintaining state), but again, it will be completely
different. Trying to keep up is becoming more and more difficult.
Kenny
Benjamin Scott wrote:
> On Thu, 20 Apr 2000, Lussier, Kenneth wrote:
> > Also, the O'Reilly book "Building Internet Firewalls" has everything you
> > need to know, you just have to figure out the IPChains syntax and apply
> > it. Rob Ziegler also wrote a book called "Linux Firewalls" that deals
> > specifically with this topic, but I haven't read it, so I can't really say
> > if it's any good.
>
> The O'Reilly books is an excellent treatment of firewalls, and every network
> admin should have a copy. It is more general then specific, however -- it is
> not a HOWTO document, and predates Linux.
>
> I cannot recommend "Linux Firewalls" by Ziegler. It considers "Linux" to
> mean "Red Hat", and he really does not seem to know what he's talking about.
> Sure, he has setup a bunch of firewalls, but he also offers advise like "I
> don't know what this does, but nothing works if you disable it, so leave it
> alone".
>
> I would recommend "Linux and OpenBSD Firewalls", by Sonnenreich and Yates.
> The authors seem rather more cluefull then Ziegler, and the book is a blast to
> read (the sidebar on "vi" had everyone laughing out loud). They cover the
> specific commands you need to use to implement and tune firewalls on both
> Linux (IPchains) and OpenBSD. They also include several good general and
> theory chapters, as well as chapters on picking a firewall machine and
> installing Linux and OpenBSD.
>
> Hope this helps!
>
> --
> Ben Scott <[EMAIL PROTECTED]>
> | "Meddle not in the affairs of dragons, for thou art crunchy and taste |
> | good with ketchup." |
>
> **********************************************************
> To unsubscribe from this list, send mail to
> [EMAIL PROTECTED] with the following text in the
> *body* (*not* the subject line) of the letter:
> unsubscribe gnhlug
> **********************************************************
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
