Customer Reviews

Designing and Implementing Linux Firewalls with QoS using netfilter, iproute2, NAT and L7-filter

5 star:		(2)
4 star:		(2)
3 star:		(1)
2 star:		(0)
1 star:		(0)

 

 

If you like opensource, QoS, Firewalls... this book would be what you need.

If you are netadmin, sysadmin or you are an IT guy and learn this book, you can limit p2p/bittorrent traffic, guarantee bandwith for some services like http, ftp, voip, etc. (QoS), you can protect your network with firewalls.

First in chapter 1 we learn about Networking Fundamentals, then in chapter 2, about Security Threats in every OSI layer. After that we are ready to learn about basis of netfilter and iproute (Firewall and QoS).

In next chapters, show us how to do layer 7 filtering, practical QoS and more advanced things. Then we apply this knowledge in a very practical serie of scenerios that come later in the book.

Very good book, I recomend this to you.

For some this might be a great book. For me, I found the title misleading. I was mainly interested in the QoS aspect as there are already excellent books available on firewalling and NAT.

The QoS seemed to be mostly an afterthought. The QoS policies utilized were tailored to the example networks but there was no discussion of generic QoS capabilities.

The biggest gripe though, is that there was Zero coverage of DSCP and/or 802.1q packet tagging. This book considers queue scheduling based on netfilter or L7-filter to be all that exists as far as QoS is concerned. If you want treatment of DSCP or 802.1p look elsewhere.

P.S. This book is cookbook format. Don't expect to learn the intricate details. It is not a bad book if that is what you are looking for but if you want a more "textbook" style book with complete coverage you will be disappointed.

For the ones, as myself, who use Linux for some time and wish to learn how to build firewalls using it, this is the book.

The language is extremely accessible and objective, unlike the majority of the many tutorials on this subject found on the net. It goes from the very basics with a good, and not boring, theoric base, and advances in a practical hands-on way, from a simple firewall script for a Linux Workstation to a complex structure of different firewalls connecting branches from a large company serving and using a great array of internet services.

The only buts I found were a couple of differences in behavior in some firewall rules, that produced a different result from the described in the book when I implemented them. However, they were easily corrected after a little traffic monitoring and googling. Probably from differences in Linux flavor or packet versions used. My advice is the same as always, test everything well before putting anything in production.

Bottom line is, best book I found to learn Linux Firewalls. Worth every cent.

It is very well written

You will learn about NAT and filtering. Maybe you will need read more about QoS, but like introduction it is fine.

Excellent book. It shows you about small-medium-large networks configurations.

Regards,

Although I am an experienced Linux user and do some Admin, I'm on my current project developing a linux embedded system that will be a router. We have QoS and netfilter requirements and I found nearly all the data on QoS old and dated for the 2.4 kernel. Furthermore, due to lack of info I had a hard time developing basic test scenarios.

After reading this book, I feel much better preparred for the project. What I liked about the book was the real world examples with some sense of humor. Even on a dry subject like network packets I was able to read thru the book easily. The tc examples and kernel config was what I really needed, and the book handled that well. The book is based on kernel 2.6.14 at least in a few areas.

I'm giving the book 4 stars because I'm just starting. The book does have large and small examples but I haven't used them yet. As an intro I give it 5 stars.