Network Security 

Overview 

Network security is essential for protecting sensitive information and preventing attacks. In this chapter, you'll learn the basics of firewalls, VPNs, and network protection measures.

1. Firewall Technologies 

Stateful vs. Stateless Firewalls 

  • Stateful Firewalls: Monitor the state of connections and only allow packets that are part of an established connection.
  • Stateless Firewalls: Analyze each packet independently and are less complex.

Tools for Configuring Firewalls 

iptables (Linux) 

  • Flexible firewall for Linux systems. 
    # Example rule: Block incoming connections on port 22 (SSH)&nbsp;<a href='/admin/powertools/edit-section/knowledge-base/netzwerktechnik/kapitel-3?section=%23+Example+rule%3A+Block+incoming+connections+on+port+22+%28SSH%29'><i class='fa fa-edit' style='font-size:initial' title='Edit Section'></i></a>
sudo iptables -A INPUT -p tcp --dport 22 -j DROP

ufw (Uncomplicated Firewall) 

  • User-friendly firewall for Ubuntu and other distributions. 
    # Example rule: Allow SSH connections&nbsp;<a href='/admin/powertools/edit-section/knowledge-base/netzwerktechnik/kapitel-3?section=%23+Example+rule%3A+Allow+SSH+connections'><i class='fa fa-edit' style='font-size:initial' title='Edit Section'></i></a>
sudo ufw allow ssh

2. VPNs (Virtual Private Networks) 

Introduction to VPNs 

A VPN creates an encrypted connection between your device and a network, protecting your data from eavesdropping.

Types of VPNs 

  • IPsec VPNs: Provide security at the network layer.
  • OpenVPN: Flexible and widely used VPN tool.
  • WireGuard: A modern and high-performance alternative to OpenVPN.

Setting Up an OpenVPN Server 

  1. Install OpenVPN: 
    sudo apt update
sudo apt install openvpn
  2. Generate certificates and configuration files.
  3. Start the OpenVPN service: 
    sudo systemctl start openvpn@server

3. Protecting Against Network Attacks 

Common Types of Attacks 

  • DDoS (Distributed Denial of Service): Overloads a network with excessive traffic.
  • Man-in-the-Middle (MITM): Eavesdropping and manipulation of communication between two devices.
  • ARP Spoofing: Manipulates the ARP protocol to redirect traffic.

Tools for Protection 

Fail2ban 

  • Blocks IP addresses after repeated failed login attempts. 
    sudo apt install fail2ban

RKHunter 

  • Scans for rootkits and security vulnerabilities. 
    sudo rkhunter --check

4. Network Encryption 

SSL/TLS 

  • Secures connections (e.g., HTTPS).
  • Certificates are created using services like Let's Encrypt.

Wi-Fi Security 

  • WPA2/WPA3: Current standards for Wi-Fi encryption.
  • Avoid WEP – it is insecure and easily cracked.

Conclusion 

With firewalls, VPNs, and appropriate protection measures, you can secure networks effectively. The next chapter covers advanced networking technologies such as SDN and network programming.

Edit Page On Grav