In the five years since the first edition of this classic book was published, Internet use has exploded. The commercial world has rushed headlong into doing business on the Web, often without integrating sound security technologies and policies into their products and methods. The security risks--and the need to protect both business and personal data--have never been greater. We've updated Building Internet Firewalls to address these newer risks. What kinds of security threats does the Internet pose? Some, like password attacks and the exploiting of known security holes, have been around since the early days of networking. And others, like the distributed denial of service attacks that crippled Yahoo, E-Bay, and other major e-commerce sites in early 2000, are in current headlines. Firewalls, critical components of today's computer networks, effectively protect a system from most Internet security threats. They keep damage on one part of the network--such as eavesdropping, a worm program, or file damage--from spreading to the rest of the network. Without firewalls, network security problems can rage out of control, dragging more and more systems down. Like the bestselling and highly respected first edition, Building Internet Firewalls, 2nd Edition, is a practical and detailed step-by-step guide to designing and installing firewalls and configuring Internet services to work with a firewall. Much expanded to include Linux and Windows coverage, the second edition describes: Firewall technologies: packet filtering, proxying, network address translation, virtual private networks Architectures such as screening routers, dual-homed hosts, screened hosts, screened subnets, perimeter networks, internal firewalls Issues involved in a variety of new Internet services and protocols through a firewall Email and News Web services and scripting languages (e.g., HTTP, Java, JavaScript, ActiveX, RealAudio, RealVideo) File transfer and sharing services such as NFS, Samba Remote access services such as Telnet, the BSD "r" commands, SSH, BackOrifice 2000 Real-time conferencing services such as ICQ and talk Naming and directory services (e.g., DNS, NetBT, the Windows Browser) Authentication and auditing services (e.g., PAM, Kerberos, RADIUS); Administrative services (e.g., syslog, SNMP, SMS, RIP and other routing protocols, and ping and other network diagnostics) Intermediary protocols (e.g., RPC, SMB, CORBA, IIOP) Database protocols (e.g., ODBC, JDBC, and protocols for Oracle, Sybase, and Microsoft SQL Server) The book's complete list of resources includes the location of many publicly available firewall construction tools....

Autorentext

Simon Cooper is a computer professional currently working in Silicon Valley. He has worked in different computer-related fields ranging from hardware through operating systems and device drivers to application software and systems support in both commercial and educational environments. He has an interest in the activities of the Internet Engineering Task Force (IETF) and USENIX, is a member of the British Computer Conservation Society, and is a founding member of the Computer Museum History Center. Simon has released a small number of his own open source programs and has contributed time and code to the XFree86 project. In his spare time, Simon likes to play ice hockey, solve puzzles of a mathematical nature, and tinker with Linux.

Zusammenfassung
This second edition of "Building Internet Firewalls" covers Unix, Linux, and Windows NT. It is a practical and detailed guide which provides step-by-step explanations of how to design and install firewalls, and how to configure Internet services to work with a firewall.

Inhalt

Preface; Scope of This Book; Audience; Platforms; Products; Examples; Conventions Used in This Book; Comments and Questions; Acknowledgments for the Second Edition; Acknowledgments for the First Edition; Part I: Network Security; Chapter 1: Why Internet Firewalls?; 1.1 What Are You Trying to Protect?; 1.2 What Are You Trying to Protect Against?; 1.3 Who Do You Trust?; 1.4 How Can You Protect Your Site?; 1.5 What Is an Internet Firewall?; 1.6 Religious Arguments; Chapter 2: Internet Services; 2.1 Secure Services and Safe Services; 2.2 The World Wide Web; 2.3 Electronic Mail and News; 2.4 File Transfer, File Sharing, and Printing; 2.5 Remote Access; 2.6 Real-Time Conferencing Services; 2.7 Naming and Directory Services; 2.8 Authentication and Auditing Services; 2.9 Administrative Services; 2.10 Databases; 2.11 Games; Chapter 3: Security Strategies; 3.1 Least Privilege; 3.2 Defense in Depth; 3.3 Choke Point; 3.4 Weakest Link; 3.5 Fail-Safe Stance; 3.6 Universal Participation; 3.7 Diversity of Defense; 3.8 Simplicity; 3.9 Security Through Obscurity; Part II: Building Firewalls; Chapter 4: Packets and Protocols; 4.1 What Does a Packet Look Like?; 4.2 IP; 4.3 Protocols Above IP; 4.4 Protocols Below IP; 4.5 Application Layer Protocols; 4.6 IP Version 6; 4.7 Non-IP Protocols; 4.8 Attacks Based on Low-Level Protocol Details; Chapter 5: Firewall Technologies; 5.1 Some Firewall Definitions; 5.2 Packet Filtering; 5.3 Proxy Services; 5.4 Network Address Translation; 5.5 Virtual Private Networks; Chapter 6: Firewall Architectures; 6.1 Single-Box Architectures; 6.2 Screened Host Architectures; 6.3 Screened Subnet Architectures; 6.4 Architectures with Multiple Screened Subnets; 6.5 Variations on Firewall Architectures; 6.6 Terminal Servers and Modem Pools; 6.7 Internal Firewalls; Chapter 7: Firewall Design; 7.1 Define Your Needs; 7.2 Evaluate the Available Products; 7.3 Put Everything Together; Chapter 8: Packet Filtering; 8.1 What Can You Do with Packet Filtering?; 8.2 Configuring a Packet Filtering Router; 8.3 What Does the Router Do with Packets?; 8.4 Packet Filtering Tips and Tricks; 8.5 Conventions for Packet Filtering Rules; 8.6 Filtering by Address; 8.7 Filtering by Service; 8.8 Choosing a Packet Filtering Router; 8.9 Packet Filtering Implementations for General-Purpose Computers; 8.10 Where to Do Packet Filtering; 8.11 What Rules Should You Use?; 8.12 Putting It All Together; Chapter 9: Proxy Systems; 9.1 Why Proxying?; 9.2 How Proxying Works; 9.3 Proxy Server Terminology; 9.4 Proxying Without a Proxy Server; 9.5 Using SOCKS for Proxying; 9.6 Using the TIS Internet Firewall Toolkit for Proxying; 9.7 Using Microsoft Proxy Server; 9.8 What If You Can't Proxy?; Chapter 10: Bastion Hosts; 10.1 General Principles; 10.2 Special Kinds of Bastion Hosts; 10.3 Choosing a Machine; 10.4 Choosing a Physical Location; 10.5 Locating Bastion Hosts on the Network; 10.6 Selecting Services Provided by a Bastion Host; 10.7 Disabling User Accounts on Bastion Hosts; 10.8 Building a Bastion Host; 10.9 Securing the Machine; 10.10 Disabling Nonrequired Services; 10.11 Operating the Bastion Host; 10.12 Protecting the Machine and Backups; Chapter 11: Unix and Linux Bastion Hosts; 11.1 Which Version of Unix?; 11.2 Securing Unix; 11.3 Disabling Nonrequired Services; 11.4 Installing and Modifying Services; 11.5 Reconfiguring for Production; 11.6 Running a Security Audit; Chapter 12: Windows NT and Windows 2000 Bastion Hosts; 12.1 Approaches to Building Windows NT Bastion Hosts; 12.2 Which Version of Windows NT?; 12.3 Securing Windows NT; 12.4 Disabling Nonrequired Services; 12.5 Installing and Modifying Services; Part III: Internet Services; Chapter 13: Internet Services and Firewalls; 13.1 Attacks Against Internet Services; 13.2 Evaluating the Risks of a Service; 13.3 Analyzing Other Protocols; 13.4 What Makes a Good Firewalled Service?; 13.5 Choosing Security-Critical Programs; 13.6 Controlling Unsafe Configurations; Chapter 14: Intermediary Protocols; 14.1 Remote Procedure Call (RPC); 14.2 Distributed Component Object Model (DCOM); 14.3 NetBIOS over TCP/IP (NetBT); 14.4 Common Internet File System (CIFS) and Server Message Block (SMB); 14.5 Common Object Request Broker Architecture (CORBA) and Internet Inter-Orb P…