Building Linux and Openbsd Firewalls

Rating:
Summary: Excellent Read
Review: I have read this book at least 2 times in the past few months - it is an easy, but very good read that explores lots of concepts and practical steps. Chapter 3 definitely rocks!

Rating:
Summary: Good intro book on firewalls and even networking in general.
Review: This book is awesome. It assumes no prior networking experience and walks you through networking basics as well as basic security issues such as Denial of Service, spoofing, etc. Chapters with complete step-by-step installation instructions for both Linux and OpenBSD Unix are included, so it's very easy for any beginner to build a firewall for their home (or office) network.
Tell people that you've personally built your own firewall using OpenBSD and you'll be guaranteed an approving nod from even the cockiest alpha geek!

Rating:
Summary: A extremely good (& funny!) book
Review: This book is Gold for any security professional and network administrators (even with a poor background on the subject). It is written in a *very* practical/easy-to-stroll-thru fashion and with a nice & funny style.

It also brings to the attention of the public an amazing OS (thx Theo!): OpenBSD and shows you how to install it from scratch & configure IPFilter, the firewall piece that comes with OpenBSD. The Linux part is also very interesting. There is also a companion Website that contains updates and tons of useful info/scripts ...

If you are onto some serious security stuff, buy an OpenBSD CD and get the book. Otherwise stick with Linux and get the book anyways.

Rating:
Summary: Excellent Primer!
Review: This book is VERY well written. It was one of the very best technical books I have ever read. Some of the info is a little dated, but the topics discussed are GREAT history. I personally get tired of security writers dismissing older exploits as they are still being used today. In addition, the majority of the first half of the book is devoted to security background and explanation of the types of major exploits.
This was the first tech book that I have ever read cover to cover. It was that interesting. The authors had a very conversational style that keeps you hooked and entertained.

I HIGHLY recommend it.

Rating:
Summary: Very useful but not for beginners
Review: This book starts off discussing why we need firewalls, along with a good recap on how TCP/IP works. (Even showing how Ping of Death, and TearDrop work!) The real meat doesn't start until Chapters 6 & 7, installing/configuring Linux, and Chapters 8 & 9 installing/configuring OpenBSD. Chapter 10 discusses tuning the firewall, showing BOTH Linux and OpenBSD setups, which is a nice touch.

Pros: a) Theory _AND_ Implementation in the same book! b) NOT a dry read. Just the right mix of a little humor. c) Covers both Linux and BSD, nice if you want to switch or are interested in seeing how the "other" OS does things.

Cons: a) A little superfluous at times, the information probably could be condensed a little. b) For Linux, David Ranch's online "Trinity OS" security guide is more resourceful. "Linux Firewalls" by Robert L. Ziegler continues where this book leaves off. I would love to see a "BSD Firewalls" which continues in the same tradition.

Summary: "Building Firewalls for dummies" would sum up this book quite well. A GREAT intro for step-by-step firewall setup.

Rating:
Summary: Great for beginer to intermediate
Review: This book starts off discussing why we need firewalls, along with a good recap on how TCP/IP works. (Even showing how Ping of Death, and TearDrop work!) The real meat doesn't start until Chapters 6 & 7, installing/configuring Linux, and Chapters 8 & 9 installing/configuring OpenBSD. Chapter 10 discusses tuning the firewall, showing BOTH Linux and OpenBSD setups, which is a nice touch.

Pros: a) Theory _AND_ Implementation in the same book! b) NOT a dry read. Just the right mix of a little humor. c) Covers both Linux and BSD, nice if you want to switch or are interested in seeing how the "other" OS does things.

Cons: a) A little superfluous at times, the information probably could be condensed a little. b) For Linux, David Ranch's online "Trinity OS" security guide is more resourceful. "Linux Firewalls" by Robert L. Ziegler continues where this book leaves off. I would love to see a "BSD Firewalls" which continues in the same tradition.

Summary: "Building Firewalls for dummies" would sum up this book quite well. A GREAT intro for step-by-step firewall setup.

Rating:
Summary: Good content, cool writing style
Review: This is a great book for people who already know that they want to deploy a free open source firewall solution to secure their network. While somewhat dated (e.g. Linux: ipchains and not iptables, OpenBSD: ipf and not pf), the book gives detailed and comprehensive directions for buidling a firewall platform, deploying a firewall and event sheds some light on the security policy development and maintainance such as securing various network services.

The books covers basic security, continues on to choosing the "right OS" (providing an enlightening discussion on Linux vs OpenBSD) and getting the right hardware for the job, and then dives right into building stuff, complete with commands and "cut-and-paste" firewalls rules.

The last part introduces the reader to the basics of intrusion detection and system monitoring, both valuable parts of any firewall setup.

One of the great features of the book is the author's humorous style. I rolled on the floor laughing about "naked penguins" and "hairy sysadmins".

Overall, get the book if you are planning to build the open source firewall solution or even if you believe that security books can be fun to read.

Anton Chuvakin, Ph.D., GCIA ... is a Senior Security Analyst with a major information security company.

Rating:
Summary: I do not like books that have off-topic infomation...
Review: While this book does have lots of examples, I don't like this book because more then %50 is filler. I don't want another book explaining how to install linux/bsd, or what an IP address is. If you don't know what a TCP/IP address is, this is the wrong book for you. Get a cup of coffee, sitdown and read the book in the store before you decide to buy this one.