Network Security

From Consultancy.EdVoncken.NET

In the Internet age, nearly all your assets are connected to a network. It makes sense to protect your network against unauthorized access.

Contents 1 Firewalls 1.1 iptables 1.2 PF 2 Intrusion Detection 2.1 Snort 3 Software Appliances

[edit] Firewalls

[edit] iptables

Linux uses iptables packet filtering software.

[edit] PF

OpenBSD and FreeBSD use the PF packet filtering software. I like it for its elegance and powerful features.

• Firewalling with OpenBSD's PF packet filter - by Peter Hansteen
• OpenBSD PF FAQ
  • Traffic Redirection

[edit] Intrusion Detection

[edit] Snort

Snort is an open source network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire. I have used it in a datacenter environment. It offers great insight in activity on your network.

[edit] Software Appliances

A large portion of security appliances are actually based on Open Source software and operating systems.

• pfSense - a very popular Open Source FreeBSD based firewall
• Vyatta - an Open Source router/firewall that uses Cisco-like syntax for configuration