.

Linux Firewalls and QoS using netfilter, iproute2, NAT, and L7-filter

Lucian Gheorghe

Learn how to secure your system and implement QoS using real-world scenarios for networks of all sizes.

The two things needed to build firewalls and QoS with Linux are two packages named netfilter and iproute. While netfilter is a packet-filtering framework included in the Linux kernels 2.4 and 2.6, iproute is a package containing a few utilities that allow Linux users to do advanced routing and traffic shaping.



SE Linux by Example Using Security Enhanced Linux

By Frank Mayer,, Karl MacMillan,, David Caplan

SELinux: Bring World-Class Security to Any Linux Environment!
SELinux offers Linux/UNIX integrators, administrators, and developers a state-of-the-art platform for building and maintaining highly secure solutions. Now that SELinux is included in the Linux 2.6 kerneland delivered by default in Fedora Core, Red Hat Enterprise Linux, and other major distributionsit's easier than ever to take advantage of its benefits.
SELinux by Example is the first complete, hands-on guide to using SELinux in production environments. Authored by three leading SELinux researchers and developers, it illuminates every facet of working with SELinux, from its architecture and security object model to its policy language. The book thoroughly explains SELinux sample policies including the powerful new Reference Policyshowing how to quickly adapt them to your unique environment. It also contains a comprehensive SELinux policy language reference and covers exciting new features in Fedora Core 5 and the upcoming Red Hat Enterprise Linux version 5.
• Thoroughly understand SELinux's access control and security mechanisms
• Use SELinux to construct secure systems from the ground up
• Gain fine-grained control over kernel resources
• Write policy statements for type enforcement, roles, users, and constraints
• Use optional multilevel security to enforce information classification and manage users with diverse clearances
• Create conditional policies that can be changed on-the-fly
• Define, manage, and maintain SELinux security policies
• Develop and write new SELinux security policy modules
• Leverage emerging SELinux technologies to gain even greater flexibility
• Effectively administer any SELinux system.

Linux 2.4 stateful firewall design


This guide is not a general security document. This guide is specifically about securing the Linux operating system against general and specific threats. If you need a general overview of security please go buy "Practical Unix and Internet Security" available at www.ora.com. O'Reilly and associates, which is one of my favorite publisher of computer books (they make nice T-shirts to) and listed in the appendix are a variety of other computer books I recommend.


Compiling the Linux Kernel


If you're relatively new to Linux, or any other UNIX or UNIX-like operating system, and would like to learn how to configure, compile, and install the Linux kernel, then this tutorial is for you. In it, you'll learn what the Linux kernel is, what modules are, and how to download, compile, and install a new kernel. This tutorial will walk you through the complete kernel compilation process.


Linux Administration Made Easy

by Steve Frampton

The “Linux Administration Made Easy” (LAME) guide attempts to describe day-to-day administration and maintenance issues commonly faced by Linux system administrators. Part of the Linux Documentation Project.








Useful Docs

---------------------------------------------------------

>> RHCE-UPDATER TO RHEL5.

>> Securing-Optimizing-Linux.

>> Advanced Bash−Scripting Guide.

---------------------------------------------------------------------------------

McGraw.Hill.Linux.The.Complete.Reference 07

The book designed for all Linux distributions.Written by Linux expert Richard Petersen, this book explains how to get up-and-running on Linux, use the desktops and shells, manage applications, deploy servers, implement security measures, and handle system and network administration tasks.


-----------------------------------------------------------------------

The Essential Unix-Linux Reference.