SunScreen 3.1 Lite Post: 7765

Sponsored Content

Special Forums Cybersecurity SunScreen 3.1 Lite Post 7765 by loadc on Monday 1st of October 2001 10:37:48 PM

10-01-2001

Registered User

exothermic buildings...

Well,

I can tell you that my FAVORITE book on firewalls was the Cheswick and Bellovin book they wrote in the early 90's while they were working at AT&T. Internet Firewalls (Repelling the Wiley Hacker), pretty much a standard, most everyone has read it, and chapter 10 recounts an evening they spent watching the Gulf War on CNN and honeypot-ting a hacker. Most of the tricks are old, and teh tech is a bit out of date, but it is still a must read for the knowledge and the logic they use, amazing people.
Another good one was Wiley's Building Linux and OpenBSD firewalls, this one was a good basic firewall construction guide, pretty basic, but it covers some of the ideas behind firewalling quite well.
I would also go out and subscribe to the firewalls mailing list, they moved it a bit ago, just go to goole and look for the firewalls mailing list, it'll be the first link. If you don't want to give upp your mailbox to it, just read and browse the digests, these are really good, and usually very in depth.

That's a good start, if you're looking to go further, like testing firewalls, etc., I'd look into some serious stuff on the bpf and iptables construction and kernels in any system, since the packets are usually handled at that level and those packages are the major ones for BSD and Linux. You can get your hands into them and really look around.

loadc

loadc

View Public Profile for loadc

Find all posts by loadc

3 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

sunscreen 3.0

Dear Guys , Can anyone advise me , how can i configuer this firewall ( SunScreen 3.0 ) . i need basic steps and advises . or if there is a link that i can find the steps how to configuer it . thx

2. UNIX and Linux Applications

SQL Lite query

Hello Everyone, I am looking to write a script that will run on many machines in a network at the same time. They need to write a result to a common location. I plan to use a SQLlite database as this common writing point. But the concern I have is how SQLlite will react to multiple writes that...

3. Shell Programming and Scripting

ambigouity on using Mime::Lite?

Hi Everyone, I have a question related to using MIME::Lite module in perl.Below i mentioned code blocks used for sending mail through MIME::Lite. $msg = MIME::Lite -> new ( From => $from, To => $to, Subject...

LEARN ABOUT SUNOS

tc-fw

Firewall mark classifier in tc(8)				       Linux					 Firewall mark classifier in tc(8)

NAME

       fw - fwmark traffic control filter

SYNOPSIS

       tc filter ... fw [ classid CLASSID ] [ action ACTION_SPEC ]

DESCRIPTION

       the fw filter allows to classify packets based on a previously set fwmark by iptables.  If it is identical to the filter's handle, the fil-
       ter matches.  iptables allows to mark single packets with the MARK target, or whole connections using CONNMARK.	The benefit of using  this
       filter  instead of doing the heavy-lifting with tc itself is that on one hand it might be convenient to keep packet filtering and classifi-
       cation in one place, possibly having to match a packet just once, and on the other users familiar with iptables but not tc will have a less
       hard time adding QoS to their setups.

OPTIONS

       classid CLASSID
	      Push matching packets to the class identified by CLASSID.

       action ACTION_SPEC
	      Apply an action from the generic actions framework on matching packets.

EXAMPLES

       Take e.g. the following tc filter statement:

	      tc filter add ... handle 6 fw classid 1:1

       will match if the packet's fwmark value is 6.  This is a sample iptables statement marking packets coming in on eth0:

	      iptables -t mangle -A PREROUTING -i eth0 -j MARK --set-mark 6

SEE ALSO

       tc(8), iptables(8), iptables-extensions(8)

iproute2							    21 Oct 2015 				 Firewall mark classifier in tc(8)