Publisher: No Starch Press Released: December 2007 Pages: 184
OpenBSD's stateful packet filter, PF, offers an amazing feature set and support across the major BSD platforms. Like most firewall software though, unlocking PF's full potential takes a good teacher.Peter N.M. Hansteen's PF website and conference tutorials have helped thousands of users build the networks they need using PF. The Book of PF is the product of Hansteen's knowledge and experience, teaching good practices as well as bare facts and software options. Throughout the book, Hansteen emphasizes the importance of staying in control by having a written network specification, using macros to make rule sets more readable, and performing rigid testing when loading in new rules. Today's system administrators face increasing challenges in the quest for network quality, and The Book of PF can help by demystifying the tools of modern *BSD network defense. But, perhaps more importantly, because we know you like to tinker, The Book of PF tackles a broad range of topics that will stimulate your mind and pad your resume, including how to: - Create rule sets for all kinds of network traffic, whether it is crossing a simple home LAN, hiding behind NAT, traversing DMZs, or spanning bridges
- Use PF to create a wireless access point, and lock it down tight with authpf and special access restrictions
- Maximize availability by using redirection rules for load balancing and CARP for failover
- Use tables for proactive defense against would-be attackers and spammers
- Set up queues and traffic shaping with ALTQ, so your network stays responsive
- Master your logs with monitoring and visualization, because you can never be too paranoid
The Book of PF is written for BSD enthusiasts and network admins at any level of expertise. With more and more services placing high demands on bandwidth and increasing hostility coming from the Internet at-large, you can never be too skilled with PF. |
-
Chapter 1 WHAT PF IS -
Packet Filter? Firewall? A Few Important Terms Explained -
Network Address Translation -
PF Today -
Chapter 2 LET'S GET ON WITH IT -
Simplest Possible PF Setup on OpenBSD -
Simplest Possible PF Setup on FreeBSD -
Simplest Possible PF Setup on NetBSD -
First Rule Set—A Single, Stand-Alone Machine -
Slightly Stricter, with Lists and Macros -
Statistics from pfctl -
Chapter 3 INTO THE REAL WORLD -
A Simple Gateway, NAT If You Need It -
That Sad Old FTP Thing -
FTP Through NAT: ftp-proxy -
Making Your Network Troubleshooting Friendly -
Tables Make Your Life Easier -
Chapter 4 WIRELESS NETWORKS MADE EASY -
A Little IEEE 802.11 Background -
Setting Up a Simple Wireless Network -
Guarding Your Wireless Network with authpf -
Chapter 5 BIGGER OR TRICKIER NETWORKS -
When Others Need Something in Your Network: Filtering Services -
Back to the Single NATed Network -
The Power of Tags -
The Bridging Firewall -
Handling Nonroutable Addresses from Elsewhere -
Chapter 6 TURNING THE TABLES FOR PROACTIVE DEFENSE -
Turning Away the Brutes -
Giving Spammers a Hard Time with spamd -
Chapter 7 QUEUES, SHAPING, AND REDUNDANCY -
Directing Traffic with ALTQ -
Redundancy and Failover: CARP and pfsync -
Chapter 8 LOGGING, MONITORING, AND STATISTICS -
PF Logs: The Basics -
Some Additional Tools for PF Logs and Statistics -
Remember, Useful Log Data Is the Basis for Effective Debugging -
Chapter 9 GETTING YOUR SETUP JUST RIGHT -
The Things You Can Tweak and What You Probably Should Leave Alone -
Cleaning Up Your Traffic: scrub and antispoof -
Testing Your Setup -
Debugging Your Rule Set -
Know Your Network, Stay in Control -
Appendix RESOURCES -
General Networking and BSD Resources on the Internet -
Sample Configurations and Related Musings -
PF on Other BSD Systems -
BSD and Networking Books -
Wireless Networking Resources -
spamd and Greylisting-Related Resources -
Book-Related Web Resources -
If You Enjoyed This Book, Buy OpenBSD CDs and Donate! -
Appendix A NOTE ON HARDWARE SUPPORT -
A Case in Point: The Story of a Small Wireless Network -
Getting the Right Hardware -
Issues Facing Hardware-Support Developers -
How to Help the Hardware-Support Efforts -
COLOPHON |
- Title:
- The Book of PF
- By:
- Peter N.M. Hansteen
- Publisher:
- No Starch Press
- Formats:
-
- Print
- Ebook
- Safari Books Online
- Print:
- December 2007
- Ebook:
- August 2009
- Pages:
- 184
- Print ISBN:
- 978-1-59327-165-7
- | ISBN 10:
- 1-59327-165-4
- Ebook ISBN:
- 978-1-59327-232-6
- | ISBN 10:
- 1-59327-232-4
|
-
Peter N.M. Hansteen Peter N. M. Hansteen is a consultant, writer and sysadmin based in Bergen, Norway. A longtime Freenix advocate, Hansteen is a frequent lecturer on FreeBSD and OpenBSD topics. His expertise as a documentation consultant (and humorous work with the RFC 1149 implementation team) have helped him gain regard in Norwegian IT publications. The Book of PF, Hansteen's first book, is an expanded follow-up to his very popular online PF tutorial. View Peter N.M. Hansteen's full profile page. |
|
Description
|
Table of Contents
|
Product Details
|
About the Author
|
 |
|
 |
|
|
|
Recommended for You
|
Recently Viewed
|
 |
|
By Wallace Wang, Wallace Wang
April 2008
By Himanshu Dwivedi
October 2008
Ebook: $35.95
Print & Ebook: $49.45
Print: $44.95
By David J. Perdue
November 2007
|
Customer Reviews
10/6/2008 5.0A very accessible book on OpenBSD's PF firewall By Dave Walz-Burkett from Undisclosed 3/8/2008 3.0PF review by Pcola LUG By Anonymous from Undisclosed
|
|
|