Building Internet Firewalls: Internet and Web Security
by By Zwicky, Elizabeth D., Cooper, Simon, and Chapman, D. Brent
Category: Computers , Security , Online Safety & Privacy

In the five years since the first edition of this classic book was  published, Internet use has exploded. The commercial world has rushed  headlong into doing business on the Web, often without integrating sound  security technologies and policies into their products and methods. The  security risks--and the need to protect both business and personal  data--have never been greater. We've updated Building Internet  Firewalls to address these newer risks.What kinds of security threats does the Internet pose? Some, like  password attacks and the exploiting of known security holes, have been  around since the early days of networking. And others, like the  distributed denial of service attacks that crippled Yahoo, E-Bay, and  other major e-commerce sites in early 2000, are in current headlines.Firewalls, critical components of today's computer networks,  effectively protect a system from most Internet security threats. They  keep damage on one part of the network--such as eavesdropping, a worm  program, or file damage--from spreading to the rest of the network.  Without firewalls, network security problems can rage out of control,  dragging more and more systems down.Like the bestselling and highly respected first edition, Building  Internet Firewalls, 2nd Edition, is a practical and detailed  step-by-step guide to designing and installing firewalls and configuring  Internet services to work with a firewall. Much expanded to include  Linux and Windows coverage, the second edition describes:Firewall technologies: packet filtering, proxying, network address  translation, virtual private networksArchitectures such as screening routers, dual-homed hosts, screened  hosts, screened subnets, perimeter networks, internal firewallsIssues involved in a variety of new Internet services and protocols  through a firewallEmail and News Web services and scripting languages (e.g., HTTP, Java, JavaScript,  ActiveX, RealAudio, RealVideo)File transfer and sharing services such as NFS, SambaRemote access services such as Telnet, the BSD "r" commands, SSH,  BackOrifice 2000 Real-time conferencing services such as ICQ and talk Naming and directory services (e.g., DNS, NetBT, the Windows Browser) Authentication and auditing services (e.g., PAM, Kerberos, RADIUS); Administrative services (e.g., syslog, SNMP, SMS, RIP and other  routing protocols, and ping and other network diagnostics) Intermediary protocols (e.g., RPC, SMB, CORBA, IIOP)Database protocols (e.g., ODBC, JDBC, and protocols for Oracle,  Sybase, and Microsoft SQL Server)The book's complete list of resources includes the location of many  publicly available firewall construction tools.