Designing and Implementing Linux Firewalls and QoS using netfilter, iproute2, NAT and l7-filter

Learn how to secure your system and implement QoS using real-world scenarios for networks of all sizes

Designing and Implementing Linux Firewalls and QoS using netfilter, iproute2, NAT and l7-filter

Lucian Gheorghe

Learn how to secure your system and implement QoS using real-world scenarios for networks of all sizes
eBook
$10.00
RRP $23.99
Save 58%
Print + eBook
$39.99
RRP $39.99
What do I get with a Mapt Pro subscription?
  • Unlimited access to all Packt’s 5,000+ eBooks and Videos
  • Early Access content, Progress Tracking, and Assessments
  • 1 Free eBook or Video to download and keep every month after trial
What do I get with an eBook?
  • Download this book in EPUB, PDF, MOBI formats
  • DRM FREE - read and interact with your content when you want, where you want, and how you want
  • Access this title in the Mapt reader
What do I get with Print & eBook?
  • Get a paperback copy of the book delivered to you
  • Download this book in EPUB, PDF, MOBI formats
  • DRM FREE - read and interact with your content when you want, where you want, and how you want
  • Access this title in the Mapt reader
What do I get with a Video?
  • Download this Video course in MP4 format
  • DRM FREE - read and interact with your content when you want, where you want, and how you want
  • Access this title in the Mapt reader
$10.00
$39.99
RRP $23.99
RRP $39.99
eBook
Print + eBook

Frequently bought together


Designing and Implementing Linux Firewalls and QoS using netfilter, iproute2, NAT and l7-filter Book Cover
Designing and Implementing Linux Firewalls and QoS using netfilter, iproute2, NAT and l7-filter
$ 23.99
$ 10.00
DNS in Action Book Cover
DNS in Action
$ 17.99
$ 10.00
Buy 2 for $20.00
Save $21.98
Add to Cart

Book Details

ISBN 139781904811657
Paperback288 pages

Book Description

Firewalls are used to protect your network from the outside world. Using a Linux firewall, you can do a lot more than just filtering packets. This book shows you how to implement Linux firewalls and Quality of Service using practical examples from very small to very large networks.

After giving us a background of network security, the book moves on to explain the basic technologies we will work with, namely netfilter, iproute2, NAT and l7-filter. These form the crux of building Linux firewalls and QOS. The later part of the book covers 5 real-world networks for which we design the security policies, build the firewall, setup the script, and verify our installation.

Providing only necessary theoretical background, the book takes a practical approach, presenting case studies and plenty of illustrative examples.

What You Will Learn

Chapter 1 is a brief introduction to networking concepts. It covers  OSI and TCP/IP networking models with explanations on their layers, TCP and UDP as Layer 4 protocols and then rounds off the chapter with a discussion on IP addresses, Subnetting, and Supernetting.

Chapter 2 discusses possible security threats and vulnerabilities found at each of the OSI layers. The goal here is to understand where and how these threats can affect us and to stay protected from attackers. It then rounds off the discussion by sketching out the basic steps required to protect the services that run on our system.

Chapter 3 introduces two tools needed to build Linux firewalls and QoS. We first learn the workings of netfilter, which is a packet filtering framework, and implement what we have learnt to build a basic firewall for a Linux workstation. We then see how to perform advanced routing and traffic shaping using the IP and TC tools provided by the iproute2 package. The chapter ends with another example scenario where we implement the concepts learnt in the chapter.

Chapter 4 discusses NAT, the types of NAT, how they work and how they can be implemented with Linux by giving practical examples. It also describe packet mangling, when to use it, and why to use it.

Chapter 5 covers layer 7 filtering in detail. We see how to install the l7-filter package, apply the necessary Linux kernel and ip table patches, and test our installation. We then learn the different applications of l7-filter and see how to put them to practical use. We will also see how to install and use IPP2P, which is an alternative to the l7-filter package but only for P2P traffic, and finally we set up a test between the two packages.

Chapter 6 raises two very popular scenarios, for which we design, implement, and test firewalls and a small QoS configuration. In the first scenario, we configure Linux as a SOHO router. Designing and Implementing Linux Firewalls - Chapter 6

Chapter 7 covers the design of a firewall system for a hypermarket having the headquarters in one location, one store in the same city and several stores in other cities. The hypermarket has an application that uses MSSQL databases in each location which is replicated at the headquarters. Designing and Implementing Linux Firewalls - Chapter 7

All locations have IP Analog Telephone Adapters (IP Phones in the diagram) with subscriptions at the main provider (the HQ provider). In this example we will use, just like in the real application, H.323 as VoIP protocol. We setup all remote locations to have an encrypted VPN connection using ip tunnel to connect to headquarters. You will be shown how to create a QOS script with HTB that controls bandwidth usage based on priorities. The next firewall we take up is that for a small ISP setup that has one internet connection, an access network, a server farm and the
internal departments.


 

Click to enlarge

We will cover the setup of firewall scripts for each of them and learn how to handle the tricky wireless server. The QoS is handled by the intranet server, the wireless server and the Core router.

Chapter 8 covers the design of a three-layered network deployed at a large provider of Internet and IP telephony services, the three layers being Core, Distribution and Access. It explains network configuration first on the core and distribution levels and then moves on to building firewalls. The huge size of the network also means that there is a need to tackle newer security threats. As seen in the figure we have 4 Cores running BGP under Zebra and each one peculiar in its own way.

There are 3 data services that this ISP can provide to its customers: Internet access, national network access, and metropolitan network access. This chapter will show you how to handle QoS so as to limit this traffic as per one's needs.

Authors

Book Details

ISBN 139781904811657
Paperback288 pages
Read More

Read More Reviews

These popular $10 titles might interest you

DNS in Action Book Cover
DNS in Action
$ 17.99
$ 10.00
Understanding TCP/IP Book Cover
Understanding TCP/IP
$ 22.99
$ 10.00
Building Websites with Joomla! v1.0 Book Cover
Building Websites with Joomla! v1.0
$ 26.99
$ 10.00
OpenVPN:  Building and Integrating Virtual Private Networks  Book Cover
OpenVPN: Building and Integrating Virtual Private Networks
$ 35.99
$ 10.00
Building Websites with Joomla! v1.0 Book Cover
Building Websites with Joomla! v1.0
$ 26.99
$ 10.00
TrixBox Made Easy Book Cover
TrixBox Made Easy
$ 20.99
$ 10.00