Linux iptables Pocket Reference

Features

• Cover Type: Paperback with 96 pages
• Published by: O'Reilly Media, Inc.
• Edition: 1st Edition edition November 2004
• Written in: English
• ISBN 10 Number: 0596005695
• ISBN 13 Number: 978-0596005696
• Book Dimensions: 6.9 x 4.2 x 0.3 inches
• Weighs: 3.2 ounces

Book Description
Firewalls, Network Address Translation (NAT), network logging and accounting are all provided by Linux's Netfilter system, also known by the name of the command used to administer it, iptables. The iptables interface is the most sophisticated ever offered on Linux and makes Linux an extremely flexible system for any kind of network filtering you might do. Large sets of filtering rules can be grouped in ways that makes it easy to test them and turn them on and off. Do you watch for all types of ICMP traffic--some of them quite dangerous? Can you take advantage of stateful filtering to simplify the management of TCP connections? Would you like to track how much traffic of various types you get? This pocket reference will help you at those critical moments when someone asks you to open or close a port in a hurry, either to enable some important traffic or to block an attack. The book will keep the subtle syntax straight and help you remember all the values you have to enter in order to be as secure as possible. The book has an introductory section that describes applications,followed by a reference/encyclopaedic section with all the matches and targets arranged alphabetically.

About The Author
Gregor N. Purdy is a consultant, author and lecturer on large-scale decision support system requirements, design, and implementation. He is also the author of various Perl modules and the Perl Shell. He uses the Concurrent Versions System (CVS) to manage

Reader Reviews
'Linux iptables Pocket Reference' is an important and sorely needed reference to iptables, the interface to the Linux packetfilter used by System Admins to create firewalls, NAT routers, transparent proxies, and other 'magical' network devices. While not a tutorial, it offers good advice for those with a grasp of basic networking concepts, and a good notion of what a firewall is and what it is used for, in a dense and concise format. Sufficiently detailed information about the protocols involved obviate the need to keep additional references at hand, and make the work relatively self-contained. This should not be the first book you read about firewalls or tcp/ip, but if you are a networking professional, a technically oriented user, or just interested in creating special purpose network devices, this book belongs in your library. Those familiar with iptables will especially appreciate the lucid description of packet flow through the tables and chains, and the supporting diagrams ... they alone are worth the price of purchase. If you have need for a book on the topic, you will not be disappointed with this one. Comment | | (Report this)