1. Chapter 1 Threat Modeling and Risk Management

   1. Components of Risk

   2. Simple Risk Analysis: ALEs

   3. An Alternative: Attack Trees

   4. Defenses

   5. Conclusion

   6. Resources

2. Chapter 2 Designing Perimeter Networks

   1. Some Terminology

   2. Types of Firewall and DMZ Architectures

   3. Deciding What Should Reside on the DMZ

   4. Allocating Resources in the DMZ

   5. The Firewall

3. Chapter 3 Hardening Linux

   1. OS Hardening Principles

   2. Automated Hardening with Bastille Linux

4. Chapter 4 Secure Remote Administration

   1. Why It's Time to Retire Clear-Text Admin Tools

   2. Secure Shell Background and Basic Use

   3. Intermediate and Advanced SSH

   4. Other Handy Tools

5. Chapter 5 Tunneling

   1. Stunnel and OpenSSL: Concepts

6. Chapter 6 Securing Domain Name Services (DNS)

   1. DNS Basics

   2. DNS Security Principles

   3. Selecting a DNS Software Package

   4. Securing BIND

   5. djbdns

   6. Resources

7. Chapter 7 Securing Internet Email

   1. Background: MTA and SMTP Security

   2. Using SMTP Commands to Troubleshoot and Test SMTP Servers

   3. Securing Your MTA

   4. Sendmail

   5. Postfix

   6. Resources

8. Chapter 8 Securing Web Services

   1. Web Server Security

   2. Build Time: Installing Apache

   3. Setup Time: Configuring Apache

   4. Runtime: Securing CGI Scripts

   5. Special Topics

   6. Other Servers and Web Security

9. Chapter 9 Securing File Services

   1. FTP Security

   2. Other File-Sharing Methods

   3. Resources

10. Chapter 10 System Log Management and Monitoring

    1. syslog

    2. Syslog-ng

    3. Testing System Logging with logger

    4. Managing System-Log Files

    5. Using Swatch for Automated Log Monitoring

    6. Resources

11. Chapter 11 Simple Intrusion Detection Techniques

    1. Principles of Intrusion Detection Systems

    2. Using Tripwire

    3. Other Integrity Checkers

    4. Snort

    5. Resources

1. Appendix A Two Complete Iptables Startup Scripts

2. Colophon

Our look is the result of reader comments, our own experimentation, and feedback from distribution channels. Distinctive covers complement our distinctive approach to technical topics, breathing personality and life into potentially dry subjects. Linley Dolby was the production editor, and Jeff Holcomb was the copyeditor for Building Secure Servers with Linux. Ann Schirmer was the proofreader. Linley Dolby and Claire Cloutier provided quality control. Julie Hawks wrote the index. Genevieve d'Entremont provided production assistance.

The image on the cover of Building Secure Servers with Linux is a caravan. Emma Colby designed the cover of this book, based on a series design by Hanna Dyer and Edie Freedman. The cover image is a 19th-century engraving from The American West in the 19th Century (Dover). Emma Colby produced the cover layout with QuarkXPress 4.1 using Adobe's ITC Garamond font.

David Futato designed the interior layout. The chapter opening images are from the Dover Pictorial Archive, Marvels of the New West: A Vivid Portrayal of the Stupendous Marvels in the Vast Wonderland West of the Missouri River, by William Thayer (The Henry Bill Publishing Co., 1888), and The Pioneer History of America: A Popular Account of the Heroes and Adventures, by Augustus Lynch Mason, A.M. (The Jones Brothers Publishing Company, 1884). This book was converted to FrameMaker 5.5.6 by Joe Wizda with a format conversion tool created by Erik Ray, Jason McIntosh, Neil Walls, and Mike Sierra that uses Perl and XML technologies. The text font is Linotype Birka; the heading font is Adobe Myriad Condensed; and the code font is LucasFont's TheSans Mono Condensed. The illustrations that appear in the book were produced by Robert Romano and Jessamyn Read using Macromedia FreeHand 9 and Adobe Photoshop 6. The tip and warning icons were drawn by Christopher Bing.