The Book of PF, 3rd Edition : A No-Nonsense Guide to the OpenBSD Firewall

OpenBSD's stateful packet filter, PF, is the heart of the OpenBSD firewall. With more and more services placing high demands on bandwidth and an increasingly hostile Internet environment, no sysadmin can afford to be without PF expertise. The third edition of __The Book of PF__ covers the most up-to-date developments in PF, including new content on IPv6, dual stack configurations, the "queues and priorities" traffic-shaping system, NAT and redirection, wireless networking, spam fighting, failover provision ing, logging, and more. You'll also learn how to: * Create rule sets for all kinds of network traffic, whether crossing a simple LAN, hiding behind NAT, traversing DMZs, or spanning bridges or wider networks * Set up wireless networks with access points, and lock them down using authpf and special access restrictions * Maximize flexibility and service availability via CARP, relayd, and redirection * Build adaptive firewalls to proactively defend against attackers and spammers * Harness OpenBSD's latest traffic-shaping system to keep your network responsive, and convert your existing ALTQ configurations to the new system * Stay in control of your traffic with monitoring and visualization tools (including NetFlow) __The Book of PF__ is the essential guide to building a secure network with PF. With a little effort and this book, you'll be well prepared to unlock PF's full potential. With more and more services placing high demands on bandwidth and an increasingly hostile Internet environment, no sysadmin can afford to be without PF expertise. This 3rd edition covers the most up-to-date developments in PF, including new content on IPv6, dual stack configurations, the "queues and priorities" traffic-shaping system, NAT and redirection, wireless networking, spam fighting, failover provision ing, logging, and more. You'll learn how to: create rule sets for all kinds of network traffic; set up wireless networks with access points, and lock them down using authpf and special access restrictions; maximize flexibility and service availability via CARP, relayd, and redirection; build adaptive firewalls; harness OpenBSD's latest traffic-shaping system to keep your network responsive, and convert your existing ALTQ configurations to the new system; and stay in control of your traffic with monitoring and visualization tools (including NetFlow). -- Edited summary from book Provides information on building networks with PF, covering such topics as creating a wireless access point, using tables and proactive defense against spammers, and setting up queries and traffic shaping with ALTQ.