Book Building Internet Firewalls (2nd Edition)
Comments from Amazon for Building Internet Firewalls (2nd Edition)
Excellent Overview of Firewalls
This is one of those rare books that manages to enlighten you (rather than inform you) about technology. The second edition is a classic. Covers so much ground (classic networking theory/stacks, protocol design, network architectures, attack vectors etc.) without losing sight of its focus, security, and without becoming diluted. I have literally read many "advanced" electrical engineering "departmental" textbooks, and this is the ONLY book I've come across that enlightens you for example, about the concept of internal addressing (within a host) vs external addressing (across nets)! {and i've checked all the "classics" like stallman, varaiya etc.} In fact, I think they should teach ee students network protocol design by first immersing students in network security failings via this book rather than all those stodgy classic texts which are the best cure for insomnia known to man!
Author: kalm77
Important Intro and Reference
This book is probably the most important book published on the subject. It is a general look at how internet firewalls work from a conceptual point of view and their role in network security. This is not and is not intended to be a guide on how to use specific firewall products. It is an excellent overview to network perimeter security.
The book contains two basic elements: Conceptual understanding of firewalls and how to look at perimeter security generally on one hand, and detailed TCP protocol reference material on the other. I found (for the second edition) both sides were reasonably up to date, and that the industry hasn't moved far enough since 2000 to invalidate this material.
As I said, this is has very little product-specific information in it and it is not a substitute for product documentation (whether Cisco, Checkpoint, or Linux/Netfilter). However it is the best reference on the subject I have found, and it is the best introduction to network perimeter security I have seen. This topic also is universally applicable to IT fields and so should be considered to be a classic study of an important topic. For this reason, this book belongs on the bookshelf of every IT professional.
Author: Christopher R. Travers
Classic book at creating your own Firewall!
O'Reilly's "Building Internet Firewalls-2nd Edition" by Zwicky is a classic book that fully describes how to build and integrate various types of firewalls into any type of networking infrastructure. The book is a beast (at over 800 pages) and covers the wide range of security concerns when implementing firewalls. Please note, this book does not cover firewalls that are platforms (so don't expect to learn how to admin a PIX or Juniper/NetScreen firewall), nor does it discuss firewalls such as CheckPoint. What this book does discuss (and in depth), is how to build your own firewall, from scratch using the O/S of your choice, and how to harden the host.
The book begins with a general introduction to TCP/IP and networking. Starting with Chapter 5 (about 100 pages into the book), the book really comes into it's own. The book's next few chapters focus on the different types of firewalls architectures (packet filters, proxy systems, bastion hosts (Unix, Linux and Windows)).
The third section of the book focuses on Internet services - RPC, TLS & SSL, WWW, FTP & TFTP, Sendmail, DNS, IRC, etc... All the major protocols are covered. I believe that this book discusses some of the fundamental TCP/IP protocols, from a security perspective, better than any other book on the market. For example, on page 352, is a detailed discussion on RPC and portmappers.
I have always enjoyed "Building Internet Firewalls" and still periodically reference it to help secure firewalls/hosts. This book should be placed various close to you on your IP Security bookshelf.
I give this book 5 pings out of 5:
!!!!!
Author: Sean E. Connelly
The best firewall book around, but lacking re: policy design
_Building Internet Firewalls_ is a great reference if you are looking for physical configuration recommendations (how to connect stuff) or protocol packet filtering characteristics (lots of great detail there), but it does not describe firewall policy design or management in any detail (and I'm not aware of a firewall book that does). This could use a few more "real world" examples of filter policies (not just physical architecture), perhaps even a chapter dedicated to each of a home network, a small-to-medium-size business (with perhaps a more complicated and rigorous policy), and a large enterprise (with multiple firewalls and a complex policy).
Author: Matthew X. Economou
Firewall Book Review
I think this is one of the best firewall books on the market. It is written in language that is easy to understand and has a lot of nice diagrams.
Author: Security Expert
This is one of those rare books that manages to enlighten you (rather than inform you) about technology. The second edition is a classic. Covers so much ground (classic networking theory/stacks, protocol design, network architectures, attack vectors etc.) without losing sight of its focus, security, and without becoming diluted. I have literally read many "advanced" electrical engineering "departmental" textbooks, and this is the ONLY book I've come across that enlightens you for example, about the concept of internal addressing (within a host) vs external addressing (across nets)! {and i've checked all the "classics" like stallman, varaiya etc.} In fact, I think they should teach ee students network protocol design by first immersing students in network security failings via this book rather than all those stodgy classic texts which are the best cure for insomnia known to man!
Author: kalm77
Important Intro and Reference
This book is probably the most important book published on the subject. It is a general look at how internet firewalls work from a conceptual point of view and their role in network security. This is not and is not intended to be a guide on how to use specific firewall products. It is an excellent overview to network perimeter security.
The book contains two basic elements: Conceptual understanding of firewalls and how to look at perimeter security generally on one hand, and detailed TCP protocol reference material on the other. I found (for the second edition) both sides were reasonably up to date, and that the industry hasn't moved far enough since 2000 to invalidate this material.
As I said, this is has very little product-specific information in it and it is not a substitute for product documentation (whether Cisco, Checkpoint, or Linux/Netfilter). However it is the best reference on the subject I have found, and it is the best introduction to network perimeter security I have seen. This topic also is universally applicable to IT fields and so should be considered to be a classic study of an important topic. For this reason, this book belongs on the bookshelf of every IT professional.
Author: Christopher R. Travers
Classic book at creating your own Firewall!
O'Reilly's "Building Internet Firewalls-2nd Edition" by Zwicky is a classic book that fully describes how to build and integrate various types of firewalls into any type of networking infrastructure. The book is a beast (at over 800 pages) and covers the wide range of security concerns when implementing firewalls. Please note, this book does not cover firewalls that are platforms (so don't expect to learn how to admin a PIX or Juniper/NetScreen firewall), nor does it discuss firewalls such as CheckPoint. What this book does discuss (and in depth), is how to build your own firewall, from scratch using the O/S of your choice, and how to harden the host.
The book begins with a general introduction to TCP/IP and networking. Starting with Chapter 5 (about 100 pages into the book), the book really comes into it's own. The book's next few chapters focus on the different types of firewalls architectures (packet filters, proxy systems, bastion hosts (Unix, Linux and Windows)).
The third section of the book focuses on Internet services - RPC, TLS & SSL, WWW, FTP & TFTP, Sendmail, DNS, IRC, etc... All the major protocols are covered. I believe that this book discusses some of the fundamental TCP/IP protocols, from a security perspective, better than any other book on the market. For example, on page 352, is a detailed discussion on RPC and portmappers.
I have always enjoyed "Building Internet Firewalls" and still periodically reference it to help secure firewalls/hosts. This book should be placed various close to you on your IP Security bookshelf.
I give this book 5 pings out of 5:
!!!!!
Author: Sean E. Connelly
The best firewall book around, but lacking re: policy design
_Building Internet Firewalls_ is a great reference if you are looking for physical configuration recommendations (how to connect stuff) or protocol packet filtering characteristics (lots of great detail there), but it does not describe firewall policy design or management in any detail (and I'm not aware of a firewall book that does). This could use a few more "real world" examples of filter policies (not just physical architecture), perhaps even a chapter dedicated to each of a home network, a small-to-medium-size business (with perhaps a more complicated and rigorous policy), and a large enterprise (with multiple firewalls and a complex policy).
Author: Matthew X. Economou
Firewall Book Review
I think this is one of the best firewall books on the market. It is written in language that is easy to understand and has a lot of nice diagrams.
Author: Security Expert
Categories:
Design
- Template
Books
- Programming
- Java
- PHP
Software
- Web and devel. environment
- Database
- Secure, Antivirus & Firewall
- Client FTP, SSH, Remote Control
AUTORIZED RESELLER
Download software

