The book of PF : a no-nonsense guide to the OpenBSD firewall / Peter N.M. Hansteen.

Format:

Book

Author/Creator:

Hansteen, Peter N. M., author.

Language:

English

Subjects (All):

OpenBSD (Electronic resource).

Physical Description:

1 online resource (250 p.)

Edition:

Third edition.

Place of Publication:

San Francisco, [California] : No Starch Press, 2015.

Language Note:

English

System Details:

text file

Summary:

OpenBSD's stateful packet filter, PF, is the heart of the OpenBSD firewall. With more and more services placing high demands on bandwidth and an increasingly hostile Internet environment, no sysadmin can afford to be without PF expertise.The third edition of The Book of PF covers the most up-to-date developments in PF, including new content on IPv6, dual stack configurations, the ""queues and priorities"" traffic-shaping system, NAT and redirection, wireless networking, spam fighting, failover provision ing, logging, and more.You'll also learn how to:Create rule sets for all kinds of network t

Contents:

Praise for The Book of PF; Foreword; Acknowledgments; Introduction; This Is Not a HOWTO; What This Book Covers; Chapter 1: Building the Network You Need; Your Network: High Performance, Low Maintenance, and Secure; Where the Packet Filter Fits In; The Rise of PF; If You Came from Elsewhere; Pointers for Linux Users; Frequently Answered Questions About PF; A Little Encouragement: A PF Haiku; Chapter 2: PF Configuration Basics; The First Step: Enabling PF; Setting Up PF on OpenBSD; Setting Up PF on FreeBSD; Setting Up PF on NetBSD; A Simple PF Rule Set: A Single, Stand-Alone Machine

A Minimal Rule SetTesting the Rule Set; Slightly Stricter: Using Lists and Macros for Readability; A Stricter Baseline Rule Set; Reloading the Rule Set and Looking for Errors; Checking Your Rules; Testing the Changed Rule Set; Displaying Information About Your System; Looking Ahead; Chapter 3: Into the Real World; A Simple Gateway; Keep It Simple: Avoid the Pitfalls of in, out, and on; Network Address Translation vs. IPv6; Final Preparations: Defining Your Local Network; Setting Up a Gateway; Testing Your Rule Set; That Sad Old FTP Thing; If We Must: ftp-proxy with Divert or Redirect

Variations on the ftp-proxy SetupMaking Your Network Troubleshooting-Friendly; Do We Let It All Through?; The Easy Way Out: The Buck Stops Here; Letting ping Through; Helping traceroute; Path MTU Discovery; Tables Make Your Life Easier; Chapter 4: Wireless Networks Made Easy; A Little IEEE 802.11 Background; MAC Address Filtering; WEP; WPA; The Right Hardware for the Task; Setting Up a Simple Wireless Network; An OpenBSD WPA Access Point; A FreeBSD WPA Access Point; The Access Point's PF Rule Set; Access Points with Three or More Interfaces; Handling IPSec, VPN Solutions; The Client Side

OpenBSD SetupFreeBSD Setup; Guarding Your Wireless Network with authpf; A Basic Authenticating Gateway; Wide Open but Actually Shut; Chapter 5: Bigger or Trickier Networks; A Web Server and Mail Server on the Inside: Routable IPv4 Addresses; A Degree of Separation: Introducing the DMZ; Sharing the Load: Redirecting to a Pool of Addresses; Getting Load Balancing Right with relayd; A Web Server and Mail Server on the Inside-The NAT Version; DMZ with NAT; Redirection for Load Balancing; Back to the Single NATed Network; Filtering on Interface Groups; The Power of Tags; The Bridging Firewall

Basic Bridge Setup on OpenBSDBasic Bridge Setup on FreeBSD; Basic Bridge Setup on NetBSD; The Bridge Rule Set; Handling Nonroutable IPv4 Addresses from Elsewhere; Establishing Global Rules; Restructuring Your Rule Set with Anchors; How Complicated Is Your Network?-Revisited; Chapter 6: Turning the Tables for Proactive Defense; Turning Away the Brutes; SSH Brute-Force Attacks; Setting Up an Adaptive Firewall; Tidying Your Tables with pfctl; Giving Spammers a Hard Time with spamd; Network-Level Behavior Analysis and Blacklisting; Greylisting: My Admin Told Me Not to Talk to Strangers

Tracking Your Real Mail Connections: spamlogd

Notes:

Description based upon print version of record.

Includes bibliographical references and index.

Description based on online resource; title from PDF title page (ebrary, viewed October 28, 2014).

ISBN:

1-4571-8541-5

1-59327-621-4

OCLC:

896796238