Linux Firewalls: Attack Detection and Response with iptables, psad, and fwsnort

The simple examples in this chapter illustrate the information that IP packet-filtering firewalls are based on. Chapter 2, "Packet-Filtering Concepts," builds on this introduction, describing how the ICMP, UDP, and TCP message types and service port numbers are used to define a packet-filtering firewall.