Der Paketfilter bei OpenWrt
Der Paketfilter bei OpenWrt
Über das Buch
OpenWrt bietet sich als alternatives Betriebssystem an für SOHO-Router, die nicht mehr oder zu selten aktualisiert werden. Aufgrund seiner Modularität eignet es sich auch für andere Projekte mit der unterstützten Hardware. Somit sind die Hürden, einen Router mit OpenWrt zu betreiben, sehr gering.
Dabei sollte nicht außer Acht gelassen werden, dass mit einem schlecht gewarteten Router sehr leicht beinahe jeder Zugriff auf die angeschlossenen Netzwerke und die darin enthaltenen Geräte erlangen kann.
Hier kann man mit dem in OpenWrt enthaltenen Paketfilter regulierend eingreifen.Wenn man die nötigen Kenntnisse besitzt.
Das ist das zentrale Thema des Buches: es will die nötigen Kenntnisse zum verantwortungsvollen Betrieb einer Paketfilter-Firewall, speziell mit Linux und insbesondere bei OpenWrt vermitteln. Dementsprechend sind die Schwerpunkte des Buches:
- grundlegende Kenntnisse über IP-Netzwerke für den Betrieb einer Paketfilter-Firewall,
- die Wirkungsweise des Netfilter-Systems bei Linux und
- die Konfiguration von Netfilter bei OpenWrt.
Ergänzt wird das Buch durch einige Kapitel, die sich speziellen praktischen Fragen rund um den Betrieb einer Paketfilter-Firewall mit OpenWrt widmen.
License
Über den Autor
Table of Contents
-
- Vorwort
-
Allgemeine Fragen
- Was ist OpenWrt?
- Was kann ich damit machen?
- Möglichkeiten und Grenzen
- Alternativen zum OpenWrt-Paketfilter
-
Grundlagen Netzwerkprotokolle
- Aufgaben eines Paketfilters
- Um welche Protokolle geht es?
- IPv4 für den Firewall-Administrator
- IPv6 für den Firewall-Administrator
- Gleichzeitiger Betrieb von IPv4 und IPv6
- ICMP und IGMP
- ICMPv6 für den Firewall-Administrator
- Network Address Translation
-
Grundlagen OpenWrt Paketfilter
- Netfilter: Kernel-Komponenten
- Netfilter: Benutzerprogramme
- Besonderheiten des Linux-Kernels
- Ein Modell der Firewall-Regeln bei OpenWrt
- Die Webschnittstelle LuCI
- Die zentrale Konfigurationsschnittstelle UCI
-
Praktische Fragen
- Wie ermittle ich meine persönlichen Anforderungen?
- Auswahl von Hardware und Software
- Härten des Systems
- Testen der Firewall
- Monitoring
- Kann ich Paketfilter umgehen?
- Wo platziere ich ein Tunnel-Gateway?
- Wie dokumentiere ich das System?
- Zusätzliche Software
- System aktualisieren
-
Anhang
- Analyse von Iptables-Firewalls
- Risikoanalyse
- Sicherheitsrichtlinien
- Glossar
- Literatur
- Kolophon
- Index
Unterstützte Institutionen
Electronic Frontier Foundation
Defending your civil liberties in a digital world.
https://www.eff.org/Based in San Francisco, EFF is a donor-supported membership organization working to protect fundamental rights regardless of technology.
Authors have earned$9,695,075writing, publishing and selling on Leanpub, earning 80% royalties while saving up to 25 million pounds of CO2 and up to 46,000 trees.
Erfahren Sie mehr über das Schreiben mit Leanpub
Die bedingungslose Leanpub, Kein Risiko, 100% zufrieden Garantie
Innerhalb von 45 Tagen ab Kauf kannst du dein Geld zu 100% zurückverlangen, bei jedem Leanpub-Kauf, in nur zwei Klicks. Wir bearbeiten die Erstattungen manuell, daher dauert es ein paar Tage, bis der Betrag ankommt.
Lese die kompletten Bedingungen.
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers), EPUB (for phones and tablets) and MOBI (for Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Top Books
- #1
Ansible for Kubernetes
Jeff GeerlingAnsible is a powerful infrastructure automation tool. Kubernetes is a powerful application deployment platform. Learn how to use these tools to automate massively-scalable, highly-available infrastructure.
- #2
Practical FP in Scala: A hands-on approach
Gabriel VolpeA practical book aimed for those familiar with functional programming in Scala who are yet not confident about architecting an application from scratch.
Together, we will develop a purely functional application using the best libraries in the Cats ecosystem, while learning about design patterns and best practices.
- #3
Functional Design and Architecture
Alexander GraninSoftware Design in Functional Programming, Design Patterns and Practices, Methodologies and Application Architectures. How to build real software in Haskell with less efforts and low risks. The first complete source of knowledge.
- #4
Production Haskell
Matt ParsonsAre you excited about Haskell, but don't know where to begin? Are you thrilled by the technical advantages, but worried about the unknown pitfalls? This book has you covered.
- #5
Tame your Work Flow
Steve Tendon and Daniel DoironDo you need a high performance enterprise governance approach improving management, execution and delivery while dealing with multiple projects/products, events, stakeholders and teams? Giving you better bottom line results, faster time to market, less work, better predictability, happier employees, and delighted clients? Then learn about TameFlow!
- #6
Ansible for DevOps
Jeff GeerlingAnsible is a simple, but powerful, server and configuration management tool. Learn to use Ansible effectively, whether you manage one server—or thousands.
- #7
Machine Learning Engineering
Andriy Burkov"If you intend to use machine learning to solve business problems at scale, I'm delighted you got your hands on this book."
—Cassie Kozyrkov, Chief Decision Scientist at Google
"Foundational work about the reality of building machine learning models in production."
—Karolis Urbonas, Head of Machine Learning and Science at Amazon
- #8
C++ Best Practices
Jason TurnerLevel up your C++, get the tools working for you, eliminate common problems, and move on to more exciting things!
- #9
Composing Software
Eric ElliottAll software design is composition: the act of breaking complex problems down into smaller problems and composing those solutions. Most developers have a limited understanding of compositional techniques. It's time for that to change.
- #10
El Manual del Manager
Keyvan Akbary, Félix López, and Álvaro Salazar¿Has deseado alguna vez el haber tenido una buena introducción al rol del Engineering Manager? En este libro aprenderás lo necesario para ejercer el rol de una manera efectiva: Expectativas y Responsabilidades del Rol, 1-1s, Ayudar a Crecer, Objetivos, Planes de Carrera, Cultura, Feedback, Contratación, Cultura de Producto y mucho más.
Top Bundles
- #1
The Tester's Library
8 Books
The Tester's Library consists of eight five-star books that every software tester should read and re-read. As bound books, this collection would cost over $200. Even as e-books, their price would exceed $80, but in this bundle, their cost is only $49.99. Here are the books, and why they should be in your library: Perfect Software and Other... - #2
agile
11 Books
In this bundle, you will find 10 different agile books. They are about different aspects of being agile. - finding a job - doing coding dojo's - Retrospectives - Personal kanban - a non-typical coaching book and even a book that gives you an insight in the lives of some agile people. - #3
WTFlop 6M + HU - Beta Bundle
6 Books
- #4
Marionette.js A to Z
3 Books
Marionette.js has become a popular Backbone-based javascript library, because it helps you avoid boiler-plate code and focus on what makes your app special. But how do you get started?Whether you want to finally get started with dynamic client-side programming (like one reader did), or are an experienced front-end dev who has inherited a... - #5
Build A Better Backbone App
3 Books
The best way to learn new development skills is through experience, but that takes time you don't have.Get the best of both worlds with this bundle: you'll learn how to produce modern web applications by learning from experienced developers like Derick Bailey and David Sulc. BackboneJS is one of the favorite tools on the web today, but it... - #6
General Systems Thinker Bundle
5 Books
The General Systems Thinker Bundle is just that: a bundle of five books to advance the reader one giant step toward improved thinking, based on General Systems principles. Four of the books are the complete General Systems Series. The fifth is fictional piece which shows some general systems thinkers in action. It's a mystery in which a group of... - #7
Experiential Learning Bundle
4 Books
This bundle provides all four volumes of the popular Experiential Learning Series at a savings of $20 over the price if purchased separately. - #8
Ansible Bundle
2 Books
After getting up and running with Ansible in Jeff Geerling's Ansible for DevOps, strengthen your skills managing tens to thousands of instances and services in Amazon's AWS cloud with Yan Kurniawan's Ansible for AWS. - #9
Learn ECMAScript 6 inside and out
2 Books
For any technology, it helps to get multiple points of view on the functionality to get the best possible understanding. For ECMAScript 6/2015, no two resources are recommended more frequently thanExploring ES6by Dr. Axel Rauschmayer andUnderstanding ECMAScript 6by Nicholas C. Zakas. These two points of view, investigating the specification and... - #10
Software architecture, for systems old and new
2 Books
This bundle includes books about hands-on software architecture.
