This book covers the basics of firewall technology to the nitty gritty details. I highly recommend it. It is well written and covers such interesting topics as protocols, databases, security strategies and examles of firewall setups.
Building Internet Firewalls covers packet Filtering, Proxy Services, NAT- network address translation and VPN’s virtual private networks. Firewall architecture such as single box, screened host, bastion host, multiple screened hosts, modems and internal firewalls for your intranets.
The different ways to filter traffic are also discussed in depth. You can filter based upon address, protocol, source and destination addresses amongst many other variables. It discusses both Micorsoft Windows and *nix based solutions.
It goes over Internet Services such as RPC, DCOM, DOM, CIFS, SMB, SSL, RAS, PPTP and so many others.
This book is a awesome reference to add to your security analyst book collection.
Here are some links that I believe will be interested
Came across a really interesting and powerful firewall distro the other day. It’s called . Based on OpenBSD, this firewall distro is one of the tightest, most full-featured free packages I’ve seen in the *NIX world. Traffic shaping, VPN, reporting — you name it, it’s got it. I highly recommend it. Runs great on an old Pentium 200mHz laptop.
My bad — I didn’t get the link syntax right. It’s called pfSense. :)