SunScreen 3.1 Lite Post: 7765

Sponsored Content

Special Forums Cybersecurity SunScreen 3.1 Lite Post 7765 by loadc on Monday 1st of October 2001 10:37:48 PM

10-01-2001

Registered User

exothermic buildings...

Well,

I can tell you that my FAVORITE book on firewalls was the Cheswick and Bellovin book they wrote in the early 90's while they were working at AT&T. Internet Firewalls (Repelling the Wiley Hacker), pretty much a standard, most everyone has read it, and chapter 10 recounts an evening they spent watching the Gulf War on CNN and honeypot-ting a hacker. Most of the tricks are old, and teh tech is a bit out of date, but it is still a must read for the knowledge and the logic they use, amazing people.
Another good one was Wiley's Building Linux and OpenBSD firewalls, this one was a good basic firewall construction guide, pretty basic, but it covers some of the ideas behind firewalling quite well.
I would also go out and subscribe to the firewalls mailing list, they moved it a bit ago, just go to goole and look for the firewalls mailing list, it'll be the first link. If you don't want to give upp your mailbox to it, just read and browse the digests, these are really good, and usually very in depth.

That's a good start, if you're looking to go further, like testing firewalls, etc., I'd look into some serious stuff on the bpf and iptables construction and kernels in any system, since the packets are usually handled at that level and those packages are the major ones for BSD and Linux. You can get your hands into them and really look around.

loadc

loadc

View Public Profile for loadc

Find all posts by loadc

3 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

sunscreen 3.0

Dear Guys , Can anyone advise me , how can i configuer this firewall ( SunScreen 3.0 ) . i need basic steps and advises . or if there is a link that i can find the steps how to configuer it . thx

2. UNIX and Linux Applications

SQL Lite query

Hello Everyone, I am looking to write a script that will run on many machines in a network at the same time. They need to write a result to a common location. I plan to use a SQLlite database as this common writing point. But the concern I have is how SQLlite will react to multiple writes that...

3. Shell Programming and Scripting

ambigouity on using Mime::Lite?

Hi Everyone, I have a question related to using MIME::Lite module in perl.Below i mentioned code blocks used for sending mail through MIME::Lite. $msg = MIME::Lite -> new ( From => $from, To => $to, Subject...

LEARN ABOUT FREEBSD

enc

ENC(4)							   BSD Kernel Interfaces Manual 						    ENC(4)

NAME

     enc -- Encapsulating Interface

SYNOPSIS

     To compile this driver into the kernel, place the following line in your kernel configuration file:

	   device enc

DESCRIPTION

     The enc interface is a software loopback mechanism that allows hosts or firewalls to filter ipsec(4) traffic using any firewall package that
     hooks in via the pfil(9) framework.

     The enc interface allows an administrator to see incoming and outgoing packets before and after they will be or have been processed by
     ipsec(4) via tcpdump(1).

     The ``enc0'' interface inherits all IPsec traffic.  Thus all IPsec traffic can be filtered based on ``enc0'', and all IPsec traffic could be
     seen by invoking tcpdump(1) on the ``enc0'' interface.

     What can be seen with tcpdump(1) and what will be passed on to the firewalls via the pfil(9) framework can be independently controlled using
     the following sysctl(8) variables:

     Name			      Defaults	    Suggested
     net.enc.out.ipsec_bpf_mask       0x00000003    0x00000001
     net.enc.out.ipsec_filter_mask    0x00000001    0x00000001
     net.enc.in.ipsec_bpf_mask	      0x00000001    0x00000002
     net.enc.in.ipsec_filter_mask     0x00000001    0x00000002

     For the incoming path a value of 0x1 means ``before stripping off the outer header'' and 0x2 means ``after stripping off the outer header''.
     For the outgoing path 0x1 means ``with only the inner header'' and 0x2 means ``with outer and inner headers''.

     incoming path					    |------|
     ---- IPsec processing ---- (before) ---- (after) ----> |	   |
							    | Host |
     <--- IPsec processing ---- (after) ----- (before) ---- |	   |
     outgoing path					    |------|

     Most people will want to run with the suggested defaults for ipsec_filter_mask and rely on the security policy database for the outer head-
     ers.

EXAMPLES

     To see the packets the processed via ipsec(4), adjust the sysctl(8) variables according to your need and run:

	   tcpdump -i enc0

SEE ALSO

     tcpdump(1), bpf(4), ipf(4), ipfw(4), ipsec(4), pf(4), tcpdump(8)

BSD
								 November 28, 2007							       BSD