I do not intend to spam this list. If you have any questions, email me
at [email protected] and give me a few days to reply. The volume of
email I have to deal with daily is quite large. Over 40 000 non-spam
emails land in my inbox monthly.
Building Firewalls with OpenBSD and PF, 3rd ed. (updated for OpenBSD
4.7)
Available in PDF format from http://www.devguide.net/bfwoap3
Table of Contents:
Introduction
Firewall Designs
Writing Your Own Firewall Ruleset
Configuring OpenBSD
/etc/pf.conf
Macros
Tables
Options
Packet Filtering
Packet Normalization
Packet Redirection
Load Balancing
Bandwidth Shaping
Logging
Management
Dynamic Rulesets
Filtering Bridges
authpf
CARP
IPsec
relayd
spamd
Proxy FTP
Proxy ARP
I started sending final PDFs on Sunday, they go out in batches of 200
each day, if you haven't received yours, hang in there. My ISP asked
me to keep those mailings under control, to avoid being blocked by
their monitoring system. It is a lot of PDFs and it will be a couple
of days before everyone get their copy, roughly in time for the
OpenBSD 4.7 release.
This is a different PDF than the one I sent last week around Thursday.
It's over 300 pages long and contains a lot more material. The last
week's mailing had some old sections in it, for which I apologize. I
was tired and checked out the wrong ones late at night. The mailing
currently on its way to you has all the right sections in it.
This updated edition ought to really be called the 'no paragraph
unturned' edition. I tried to accommodate all of your suggestions and
critique. For example, almost all examples are full-length rulesets or
mini-rulesets as my previous choice of using just short snippets was
confusing to some of you.
There are over 20 illustrations, something that was missing from the
2nd edition, but was added in the original 3rd edition last year. This
time they've been re-drawn to make them easier to understand. Only you
will be able to tell me if it worked.
The layout of the whole book has changed in order to make it more
readable. I also worked hard on making the material easier to
understand for beginners. That doesn't mean I dumbed it down, but I
tried to give plenty of hints and references to additional, external
sources of information. The whole internal reference apparatus has
been updated, it will now be easier to find things. Of course, being a
PDF, the file is searchable.
The PDFs are not protected by DRM. I personalize them by putting your
email addresses inside them. Nobody else sees your address, each PDF
is generated for you and only you. That's another reason those mailing
take a long time, to generate a new PDF with all cross-reference
material takes 4-5 minutes and it has to be done twice per each email
address.
If you find something amiss, let me know. If you find something cool,
let others know.
----------
Issues not resolved by now.
I will do my best to make sure that all issues such as missing books,
unanswered emails and such get properly resolved within the next four
weeks. My health being what it is, if 500-600 of you send me an email,
I cannot answer them as soon as I would like to. For general
announcements related to the books and other stuff from devGuide.net
ltd, follow us on Twitter @devguide.
----------
My relationship with the project, the Computer Shop of Calgary, and
the community.
The strains of my health issues were too big to handle. I incorrectly
assumed that I would be able to handle everything as I ought to. It
seemed a few times over the last 3-4 years that things were improving.
Longer spans of time without serious health problems bode well. Or
rather they seemed to. This time around I make no promises, but devote
as much time as I can to fixing what's broken.
My relationship with the project, the Computer Shop of Calgary, and
the community is strained, to say the least. But I do have the will to
make amends and I am working on fixing that. We will see what develops
in the future, but right now I am fixing things. At my own pace, but
it is a sincere effort. And the list of the unresolved items gets
shorter every day.
----------
Announcement on the Command-Line Companion will be posted to this list
later this week.
----------
Last, but not least, I want to thank everyone who sent me their best
wishes, get -well-soons, and provided valuable feedback. You have no
idea what it means to me. Those who found peace in telling me to go
to hell, I understand your anger.
Kind Regards,
Jacek
