LINUX iptables Pocket Reference Firewalls, NAT & Accounting - Jordan Vromans - Third - 2000 - Paperback - O'reilly

LINUX iptables Pocket Reference Firewalls, NAT & Acounting

LINUX

Firewalls, Network Address Translation (NAT), and network logging and accounting are all provided by Linux's Netfilter system, also known by the name of the command used to administer it, iptables. The iptables interface is the most sophisticated ever offered on Linux and makes Linux an extremely flexible system for any kind of network filtering you might do. Large sets of filtering rules can be grouped in ways that make it easy to test them and turn them on and off.

Do you watch for all types of ICMP traffic�some of them quite dangerous? Can you take advantage of stateful filtering to simplify the management of TCP connections? Would you like to track how much traffic of various types you get?

This pocket reference will help you at those critical moments when someone asks you to open or close a port in a hurry, either to enable some important traffic or to block an attack. Linux iptables Pocket Reference will keep the subtle syntax straight and help you remember all the values you have to enter in order to be as secure as possible. The listings of all options are divided into those suitable for firewalling. accounting, and NAT.

Contents

Introduction
An Example Command
Concepts
Applications
Configuring iptables
Connection Tracking
Accounting
Network Address Translation (NAT)
Source NAT and Masquerading
Destination NAT
Transparent Proxying
Load Distribution and Balancing
Stateless and Stateful Firewalls
Tools of the Trade
iptables Command Reference
Getting help
The iptables Subcommands
iptables Matches and Targets
Utility Command Reference
iptables-restore iptables-save
Index