O'Reilly - Building Internet Firewalls, 2nd Edition

《O'Reilly - Building Internet Firewalls, 2nd Edition》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、BuildingInternetFirewallsElizabethD.Zwicky,SimonCooper&D.BrentChapmanSecondEdition,June2000ISBN:1-56592-871-7,890pagesCompletelyrevisedandmuchexpanded,theneweditionofthehighlyrespectedandbestsellingBuildingInternetFirewallsnowcoversUnix,Linux,andWindowsNT.Thispracticalanddetailedguideexplains

2、instep-by-stepfashionhowtodesignandinstallfirewallsandconfigureInternetservicestoworkwithafirewall.Itcoversawiderangeofservicesandprotocolsandoffersacompletelistofresources,includingthelocationofmanypubliclyavailablefirewallsconstructiontools.ReleaseTeam[oR]2001CONTENTSPreface1ScopeofThisBook

3、AudiencePlatformsProductsExamplesConventionsUsedinThisBookCommentsandQuestionsAcknowledgmentsfortheSecondEditionAcknowledgmentsfortheFirstEditionINetworkSecurity81WhyInternetFirewalls?91.1WhatAreYouTryingtoProtect?1.2WhatAreYouTryingtoProtectAgainst?1.3WhoDoYouTrust?1.4HowCanYouProtectYourSit

4、e?1.5WhatIsanInternetFirewall?1.6ReligiousArguments2InternetServices272.1SecureServicesandSafeServices2.2TheWorldWideWeb2.3ElectronicMailandNews2.4FileTransfer,FileSharing,andPrinting2.5RemoteAccess2.6Real-TimeConferencingServices2.7NamingandDirectoryServices2.8AuthenticationandAuditingServic

5、es2.9AdministrativeServices2.10Databases2.11Games3SecurityStrategies423.1LeastPrivilege3.2DefenseinDepth3.3ChokePoint3.4WeakestLink3.5Fail-SafeStance3.6UniversalParticipation3.7DiversityofDefense3.8Simplicity3.9SecurityThroughObscurityIIBuildingFirewalls504PacketsandProtocols514.1WhatDoesaPac

6、ketLookLike?4.2IP4.3ProtocolsAboveIP4.4ProtocolsBelowIP4.5ApplicationLayerProtocols4.6IPVersion64.7Non-IPProtocols4.8AttacksBasedonLow-LevelProtocolDetails5FirewallTechnologies685.1SomeFirewallDefinitions5.2PacketFiltering5.3ProxyServices5.4NetworkAddressTranslation5.5VirtualPrivateNetworks6F

7、irewallArchitectures816.1Single-BoxArchitectures6.2ScreenedHostArchitectures6.3ScreenedSubnetArchitectures6.4ArchitectureswithMultipleScreenedSubnets6.5VariationsonFirewallArchitectures6.6TerminalServersandModemPools6.7InternalFirewalls7Firew