Item description for Building Firewalls with OpenBSD and PF, 2nd Edition by Jacek Artymiak...
Written by Jacek Artymiak, a frequent contributor to ONLamp.com, Building Firewalls with OpenBSD and PF is the first and only print publication devoted solely to the subject of the pf packet filter used in OpenBSD, FreeBSD, and NetBSD operating systems. Topics covered include: firewall design, ruleset syntax, packet normalization (scrubbing), packet redirection (masquerading), packet filtering, bandwidth management (ALTQ), load balancing, and more. The author maintains a web site and a mailing list for the readers of his book.
Promise Angels is dedicated to bringing you great books at great prices. Whether you read for entertainment, to learn, or for literacy - you will find what you want at promiseangels.com!
Est. Packaging Dimensions: Length: 8.8" Width: 5.8" Height: 1" Weight: 1.05 lbs.
Release Date Nov 1, 2003
Publisher Jacek Artymiak
ISBN 8391665119 ISBN13 9788391665114
Reviews - What do customers think about Building Firewalls with OpenBSD and PF, 2nd Edition?
Now this was a good book Mar 12, 2007
I have used PFCTL for a couple of years, but have needed a book for reference that was easy to understand. I found this book to be exactly that. I recommend this book to anyone that needs a good reference on pfctl firewall. I had some holes in my knowledge/understanding of pfctl that this book readily filled. Much appreciated, and will be used a lot.
Best source of pf NAT rule info Jan 15, 2006
I looked all over for pf NAT rule info I needed to attach a subnet to the internet through my desktop computer. This book had the exact pf NAT rule I needed, plus an example of the next NAT rule I will need when I have more than one subnet connected to my desktop and I want the subnets to be able to communicate with each other. If you need to use NAT rules with pf, this is your best source of information.
Good Start Dec 13, 2005
This is a good start to get familiar with PF. Apart from being a bit pricey, I found the examples in the back of the book severely lacking, as they don't take into account more advanced scenarios. There are a few spelling and grammatical errors that could be corrected in the next edition as well. I hope the next edition has a better expansion with real-world examples that would be useful to the IT professional: VoIP queues, dealing with advanced topics NAT->$ext_if, issues with RDR, etc.
A great intro for me... Sep 26, 2005
I had recently started to use OpenBSD and was interested in learning more about PF, so I consulted this site. This was the only book that came up so I decided to buy it. Surprisingly, it was an easy read; completed in 4 days. The book does a good job of first going through installing obsd and then explaining some basic firewall setups. Following the first couple chapters, Artymiak goes into detail on all the nifty tricks PF can pull off. It was a good stepping stone for me in building my own firewall. The appendix was quite usefull as well; which included basic pf.conf setups to get you off the ground. Artymiak is also involved in the obsd comunity as well, which is great. The only thing I wished he had talked about was CARP. Maby in a future Edition?
Overall a great book for a PF beginner with some unix experience
Excellent hands-on guide to Pf on OpenBSD or other BSDs Dec 31, 2004
I was an early buyer of the first edition of 'Building Firewalls with OpenBSD and PF' (BFWOAP), but I am confident my opinion applies to the second edition as well. BFWOAP is the perfect book for anyone looking to build an firewall with Pf. Since Pf is now part of FreeBSD, NetBSD, and DragonFly BSD, this book will be helpful to anyone looking to use Pf on those platforms.
I like the direct approach taken by author Jacek Artymiak. With few exceptions he ensures the reader is provided enough descriptions and working examples to implement Pf in an operational environment. Too often authors discuss important topics but fail to follow through on implementation. I was able to follow the author's instructions and build a variety of Pf firewalls. I found sections describing packet normalization, packet redirection and forwarding (via 'dup-to'), and prioritization to be most helpful.
The author's blog indicates he is working on a new firewall book that expands beyond OpenBSD and Pf. I hope he is working with an established publisher to ensure his next book has a wider audience.
If you're mainly interested in creating firewalls using Pf, this book is for you. If you want to know more about OpenBSD, I recommend Michael Lucas' 'Absolute OpenBSD' or 'Secure Architectures with OpenBSD' by Brandon Palmer and Jose Nazario.