Red Hat Linux Security and Optimization [Paperback]

Mohammed J. Kabir (Author)

Book Description

ISBN-10: 0764547542 | ISBN-13: 978-0764547546 | Publication Date: December 1, 2001

Red Hat Linux Security and Optimization is a reference for power-users and administrators covering all security issues, including Filesystems Security, Securing root accounts and Firewalls. Other Security books talk about how to apply certain patches to fix a security problem -- but this book shows you how to secure all applications so that the chances for a security breach are automatically minimized. Application performance benchmarking will also be covered. This book introduces you to many application-specific performance and benchmarking techniques and shows you how to tune your computer as well as your networks. This book covers all the primary Red Hat Linux Applications such as Apache Web Server, WuFTP, FTP server, BIND DNS server, Sendmail SMTP server and focuses on how to enhance security for each of them. It also shows you how to secure NFS and Samba Server, as well as the Apache Web Server.

Editorial Reviews

From the Back Cover

Your Official Red Hat(r) Linux(r) Guide to Security and Optimization Reviewed and approved by the experts at Red Hat, this comprehensive guide delivers the know-how you need to improve the performance of your Red Hat Linux system-and protect it from attacks and break-ins. Red Hat Linux expert Mohammed Kabir starts by showing you how to tune the kernel and filesystems and optimize network services, from speeding up Web servers to boosting the performance of Samba. He then explains how to secure your Red Hat Linux system, offering hands-on techniques for network and Internet security as well as in-depth coverage of Linux firewalls and virtual private networks. Complete with security utilities and ready-to-run scripts on CD-ROM, this official Red Hat Linux guide is an indispensable resource. Proven Red Hat Linux Performance and Security Solutions
* Upgrade and configure your hardware to boost performance
* Customize the kernel and tune the filesystem for optimal results
* Use JFS and LVM to enhance the filesystem reliability and manageability
* Tweak Apache, Sendmail, Samba, and NFS servers for increased speed
* Protect against root compromises by enabling LIDS and Libsafe in the kernel
* Use PAM, OpenSSL, shadow passwords, OpenSSH, and xinetd to enhance network security
* Set up sensible security on Apache and reduce CGI and SSI risks
* Secure BIND, Sendmail, ProFTPD, Samba, and NFS servers
* Create a highly configurable packet filtering firewall to protect your network
* Build a secure virtual private network with FreeS/WAN
* Use port scanners, password crackers, and CGI scanners to locate vulnerabilities before the hackers do
Reviewed and Approved by the Experts at Red Hat CD-ROM Features Security tools, including cgichk.pl, gShield, IP Filter, John the Ripper, Lids, LSOF, Nessus, Netcat, Ngrep, Nmap, OpenSSH, OpenSSL, Postfix, SAINT trial version, SARA, Snort, Swatch, tcpdump, Tripwire Open Source Linux Edition, Vetescan, and Whisker Scripts from the book Plus a searchable e-version of the book www.redhat.com www.hungryminds.com

About the Author

MOHAMMED J. KABIR is the founder and CEO of Evoknow, Inc., a company specializing in customer relationship management software development. His books include Red Hat Linux 7 Server, Red Hat Linux Administrator's Handbook, Red Hat Linux Survival Guide, and Apache Server 2 Bible.

Product Details

• Paperback: 650 pages
• Publisher: *Red Hat (December 1, 2001)
• Language: English
• ISBN-10: 0764547542
• ISBN-13: 978-0764547546
• Product Dimensions: 9.2 x 7.4 x 1.6 inches
• Shipping Weight: 2.3 pounds
• Average Customer Review: 3.4 out of 5 stars  See all reviews (9 customer reviews)
• Amazon Best Sellers Rank: #1,569,714 in Books (See Top 100 in Books)

More About the Author

Mohammed Junayed Kabir (prefers to be called Kabir) was born in Bangladesh in 1971. He came to Sacramento, CA in 1990 to study computer engineering and has been living in Sacramento since then. His first book CGI Primer was written in 1995 and published in 1996. Kabir continued to write a dozen more books on Linux, Apache, MySQP/PHP, etc. over the last decade. He decided to stop writing technical books for publishers as he found the publishing process to be outdated and feels technical writing is best done in online format where changes, revisions and updates are up to speed with technologies that are written about.

Kabir is working on few new online titles: Virtual CIO for Small Business -- an online book to help small businesses make better technology decisions; The Software Company in a Box; Smart Sourcing Software for Small Companies -- a guide to help small businesses identify software needs, learn how to engage and manage small software projects using common sense tools and methodologies.

Kabir's company, EVOKNOW (short for Evolutionary Knowledge), focuses on building Web apps that help customers find initial user base and the kick-off buzz needed to launch new products and services. Kabir can be reached at [e-mail]

Customer Reviews

Most Helpful Customer Reviews

9 of 10 people found the following review helpful:

4.0 out of 5 stars Contradictory, but a good start point, March 16, 2002

A Kid's Review

This review is from: Red Hat Linux Security and Optimization (Paperback)

I bought this book to help me learn more of the configuration options for my server and what they did. While this book presents the majority of options, it is contradictory in places and follows old school techniques.

For instance, in the chapter on Apache, the author tells you how to compile Perl into Apache. This is great, but the more preferred method to including things into Apache is to use a DSO so that you don't have to stop and recompile the server everytime you add something. Then it goes on to Squid. In my experience using Squid, it has run on port 3128 and the authoer mentions that, but as an afterthought and not until after he has already told you to run it on port 8080.

In addition, this book neatly seperates content on security and optimization. However, do not buy this book with the thought that it will show you how to build a server or setup your web services. This book is meant only as a resource for tuning your stuff and will not tell you how to install it. You really need to have a knowledge of Linux beforehand.

To put it plainly, buy this book as a corraborative resource or buy it and prepare to refer to other resources on the internet to get a second opinion. Buy this book if you are comfortable tinkering with things. Though, if you are running a Linux system, you had better be comfortable tinkering and not faint of heart or else you'll never get anything done!

2 of 2 people found the following review helpful:

5.0 out of 5 stars Great book!, February 13, 2002

By 

"jason24x" (New York, NY) - See all my reviews

This review is from: Red Hat Linux Security and Optimization (Paperback)

I bought at local bookstore after reading the chapter on LIDS and I went to work next saturday and implemented LIDS using the latest 2.4 patches found at the LIDS.org site. It is owesome; no more root hacks! I also liked the LibSafe section.

It is an amazing book for someone who wants to learn more about security fast.

2 of 2 people found the following review helpful:

5.0 out of 5 stars Moving from Immediate to Advanced, February 11, 2002

By 

Reginald McCord (Atlanta, Ga.) - See all my reviews

This review is from: Red Hat Linux Security and Optimization (Paperback)

'RH Linux Security and Optimization' is the perfect vechicle to upgrade your skill level and linux system expertise. From performance basics,network performance, security tools, firewalls, vpns and dealing with compromised systems; this book has all the information you will need to maintain both your corporate and personal linux networks.