www/books.html - diff

Return to books.html CVS log

Up to [local] / www

Diff for /www/books.html between version 1.102 and 1.103

version 1.102, 2015/07/02 05:49:03

version 1.103, 2016/01/29 19:03:31

Line 2

<html>

<head>

<title>The OpenBSD Bookstore</title>

<title>Books about OpenBSD and UNIX</title>

</head>

Line 15

<h2>UNIX and BSD books</h2>

Note that the information in some older books may no longer be accurate

or relevant to modern OpenBSD.

<hr>

<h3>OpenBSD-specific books</h3>

Line 26

Line 28

<dd>ISBN-10: 1-59327-589-7

<dd>ISBN-13: 978-1-59327-589-1

<dd>

The first sentence of this book is, "This is a book about building the

network you need". Taking it from there, Peter walks you through the whys

and the hows of building the high performance, low maintenance network you need,

using OpenBSD tools.

The book covers all bases from the basic one machine configuration and basic

local area networks, all the way up to configurations with traffic shaping and

load balancing with "self healing" networks and countermeasures against common

problems such as DoS attempts and spamming. A basic understanding of TCP/IP

and some Unix knowledge is assumed.

The official book website for a sample chapter, table of contents and errata

can be found at

<a href="http://www.nostarch.com/pf3">http://www.nostarch.com/pf3</a>.

The first sentence of this book is "This is a book about building the

network you need." Taking it from there, Peter walks you through the whys

<dt><a name="book8">The Book of PF, 2nd Edition

A No-Nonsense Guide to the OpenBSD Firewall</a>

<dd>by Peter N. M. Hansteen

<dd>ISBN-13: 978-1-59327-274-6

<dd>November 2010.

<dd>

The first sentence of this book is, "This is a book about building the

network you need". Taking it from there, Peter walks you through the whys

and the hows of building the high performance, low maintenance network you need,

using OpenBSD tools.

using OpenBSD tools.

The book covers all bases from the basic one machine configuration and basic

The book covers all bases, from the basic one machine configuration and basic

local area networks, all the way up to configurations with traffic shaping and

load balancing with "self healing" networks and countermeasures against common

load balancing with "self-healing" networks and countermeasures against common

problems such as DoS attempts and spamming. A basic understanding of TCP/IP

and some Unix knowledge is assumed.

and some Unix knowledge is assumed.

The official book website for a sample chapter, table of contents and errata

can be found at

can be found <a href="http://www.nostarch.com/pf3">here</a>.

<a href="http://www.nostarch.com/pf2.htm">http://www.nostarch.com/pf2.htm</a>.

<dt><a name="book9">SSH Mastery</a>

<dd>by Michael Lucas

<dd>by Michael W. Lucas

<dd>ISBN-13: 978-1470069711

<dd>ISBN-10: 1470069717

<dd>February 2012, 145 pp.

<dd>OpenSSH, PuTTY, Tunnels, and Keys

<dd>

A guide to what you need to know about SSH. This book will help you

eliminate passwords on your network, tunnel unencrypted protocols

through secure channels, build VPNs with OpenSSH, and more. Focuses on

the OpenSSH server, the OpenSSH client, and the PuTTY client.

Michael W Lucas is the author of Absolute OpenBSD and other BSD books.

Michael W. Lucas is the author of Absolute OpenBSD and other BSD books.

Helping support OpenBSD, Michael is contributing all his author's profits, from

The official SSH Mastery website is

orders via the main OpenBSD order page, back to the project.

<a href="https://www.michaelwlucas.com/nonfiction/ssh-mastery">here</a>.

<a href="https://www.michaelwlucas.com/nonfiction/ssh-mastery">The

official SSH Mastery website is here</a>

<dt><a name="book11">Sudo Mastery</a>

<dd>by Michael Lucas

<dd>ISBN-13: 978-1493626205

<dd>ISBN-10: 1493626205

<dd>October 2013, 144pp.

<dd>Access Control for Real People

<dd>

Unix-like operating systems use a rudimentary access control system:

the root account can do anything, while other users are peasants with

only minimal access. This worked fine in UNIX's youth, but today,

system administration responsibilities are spread among many people

and applications. Different people may need different slices of

root's power. However pros and cons are considered as well.

This book also thoroughly covers extended features used in other

operating systems, but not supported in OpenBSD's more minimalist

policy.

<a href="https://www.michaelwlucas.com/nonfiction/sudo-mastery">The

official Sudo Mastery website is here</a>

<dt><a name="book12">DNSSEC Mastery</a>

<dd>by Michael Lucas

<dd>ISBN-13: 978-1484924471

<dd>ISBN-10: 1484924479

<dd>May 2013, 130 pp.

<dd>Securing the Domain Name System with Bind.

<dd>

DNS is one of the oldest protocols on the Internet, and was designed

for a network without hostile users. Anyone who wants to break into a

network starts by investigating the target's Domain Name Service.

In addition to providing a manual for "bind", which is in OpenBSD's

default configuration, this book thoroughly targets the extensions

which are available in the port net/isc-bind. DNS Security

Extensions, or DNSSEC, hardens DNS. But learning DNSSEC requires

wading through years of obsolete tutorials, dead ends, and

inscrutable standards. Strengths and weaknesses of DNSSEC are

discussed, some of which may explain why OpenBSD does not support the

extended features by default.

<a href="https://www.michaelwlucas.com/nonfiction/dnssec-mastery">The

official DNSSEC Mastery website is here</a>

<dt><a name="book10">Absolute OpenBSD. 2nd Edition!</a>

<dd>by Michael Lucas

<dd>by Michael W. Lucas

<dd>ISBN-13 978-1-59327-476-4

<dd>ISBN-13: 978-1-59327-476-4

<dd>April 2013, 536 pp.

<dd>

Michael Lucas brings us the long anticipated second edition of his

Michael W. Lucas brings us the long anticipated second edition of his

wildly successful book about using OpenBSD. This book covers all aspects of

the OpenBSD system for new UNIX and BSD users alike.

the OpenBSD system for new UNIX and BSD users alike.

The official Absolute OpenBSD 2nd edition website is

The official Absolute OpenBSD 2nd edition website is here.</a>.

here</a>.

<dt><a name="book5">OpenBSD 4.0: A Crash Course</a> (PDF)

<dd>by Jem Matzan

<dd>ISBN 0-596-51015-2

<dd>January 2007, 59 pp.

<dd>

Jem Matzan, known for his online articles promoting OpenBSD,

is the author of this "Short Cut" guide to installing and administering

OpenBSD 4.0. Topics include initial configuration, desktop and server,

using ports (complete with extra hints on some ports), and maintenance.

You order this book direct from O'Reilly, and it comes as a PDF

with free download of corrected versions as they become available.

<ul>

</ul>

[<a href="http://www.oreilly.com/catalog/openbsd4/">Order from O'Reilly</a>]

Secure Architectures with OpenBSD</a>

<dd>by Brandon Palmer, Jose Nazario.

<dd>ISBN 03-21193-66-0

<dd>April 2004, 520 pp.

<dd>

A guide for system and network administrators who need to move to a

more secure operating system and a reference for seasoned OpenBSD users

who want to fully exploit every feature of the system. This book

Line 197

Line 99

100% applicable, but probably the closest there is to an overall

system internals manual for OpenBSD.

<dt>

Source Code Secrets: The Basic 386BSD Operating System Reference

(Volume 1 of Operating System Source Code Secrets)

Line 210

Line 113

Not all of it applies to modern versions of OpenBSD, of course, but

you can still learn a lot from it.

<dt>

Berkeley Unix: A Simple and Comprehensive Guide

<dd>by James Wilson

Line 217

Line 121

Begins with the basic commands and finishes with advanced programming

techniques. Offers strong coverage of systems calls.

<dt>

An Introduction to Berkeley Unix and ANSI C

<dd>by Jack Hodges

Line 226

Line 131

of programming; the correct use of syntax; programming style, debugging, logic,

and system programming with C.

<dt>

4.4 BSD User's Reference Manual (URM)

Line 236

Line 142

which are specific to OpenBSD, and more up-to-date. So

you don't need this one: use the man command instead.

<dt>

4.4 BSD System Manager's Manual (SMM)

Line 249

Line 156

4.4BSD distributions.

They are not included with OpenBSD.

<dt>

BSD mit Methode

Line 263

Line 171

Lehmann's Online Bookshop</a>. However, you might want to pick up a <a

href="http://www.lob.de/cgi-bin/work/frameset?flag=jfl&frame=yes&id=38effe1813566">more

recent version of the CD-ROM</a>.

<dt>

The OpenBSD PF Packet Filter Book

Line 289

Line 197

<dd>by John Muster

<dd>A general Unix book that covers all areas of the system.

<dt>UNIX Power Tools

<dd>by Jerry D. Peek, Tim O'Reilly, and Mike Loukides

<dd>

Line 301

Line 210

<a href="faq/ports/index.html">Ports Mechanism</a>

that is part of OpenBSD.

<dt><a href="http://www.rodsbooks.com/multiboot/">The Multi-Boot Configuration Handbook</a>

<dd>by Rod Smith

<dd>

Line 316

Line 226

<dd>

This is an excellent book on Unix system administration.

<dt><a name="book11">Sudo Mastery</a>

<dd>by Michael W. Lucas

<dd>ISBN-13: 978-1493626205

<dd>ISBN-10: 1493626205

<dd>October 2013, 144pp.

<dd>Access Control for Real People

Unix-like operating systems use a rudimentary access control system:

the root account can do anything, while other users are peasants with

only minimal access. This worked fine in UNIX's youth, but today,

system administration responsibilities are spread among many people

and applications. Different people may need different slices of

root's power. However pros and cons are considered as well.

This book also thoroughly covers sudo's extended features.

The official Sudo Mastery website is

<a href="https://www.michaelwlucas.com/nonfiction/sudo-mastery">here</a>.

<dt>Essential System Administration

<dd>by AEleen Frisch

<dd>by Æleen Frisch

<dd>

This book covers many fundamental tasks in system administration. It includes

examples for a wide range of Unix operating systems, including BSD.

Line 332

Line 261

This book leads its reader through all the low-level kernel models for

multi-processing architectures.

<dt>Lions' Commentary on UNIX 6th Edition with Source Code

<dd>by John Lions

<dd>

Line 344

Line 274

to how a timesharing OS works, if you've not been inside one before.

Substantially shorter than the McKusick book above.

<dt>The Practice of Programming

<dd>by Brian W. Kernighan and Rob Pike

<dd>

Line 351

Line 282

This book covers practical programming considerations for C, C++ and Java.

Highly recommended.

<dt>The Elements of Programming Style

<dd>by Brian W. Kernighan and P. J. Plauger

<dd>

This book is similar to The Practice of Programming, but older. The

examples are given in Fortran and PL/I.

<dt>Advanced Programming in the Unix Environment (2nd Edition)

<dd>by W. Richard Stevens, Stephen A. Rago

<dd>

Line 366

Line 299

This book along with the OpenBSD manual pages

make an excellent combination.

<dt>The C Programming Language

<dd>by Brian W. Kernighan and Dennis M. Ritchie

<dd>

Line 373

Line 307

perhaps the only one you will ever need. It focuses strictly on the C language,

not how to use your compiler or anything else.

<dt>C: A Reference Manual

<dd>by Samuel P. Harbison and Guy L. Steele

<dd>

Line 380

Line 315

This book is not a tutorial (hence the title), it deals with syntax, data types,

ISO C library functions, and C/C++ compatibility.

<dt>The Art of Software Security Assessment

<dd>by Mark Dowd, John McDonald and Justin Schuh

<dd>Covers code auditing, design and operational review, types of

Line 406

Line 342

Furthermore, this book is the first German book to cover VPN via OpenSSH.

<dd>

<dt><a name="book12">DNSSEC Mastery</a>

<dd>by Michael W. Lucas

<dd>ISBN-13: 978-1484924471

<dd>ISBN-10: 1484924479

<dd>May 2013, 130 pp.

<dd>Securing the Domain Name System with BIND

DNS is one of the oldest protocols on the Internet, and was designed

for a network without hostile users. Anyone who wants to break into a

network starts by investigating the target's Domain Name Service.

In addition to providing a manual for BIND, this book thoroughly targets

the extensions which are available in the port net/isc-bind. DNS Security

Extensions, or DNSSEC, harden DNS. But learning DNSSEC requires

wading through years of obsolete tutorials, dead ends, and

inscrutable standards. Strengths and weaknesses of DNSSEC are

discussed.

The official DNSSEC Mastery website is

here</a>.

<dt>SSH, The Secure Shell.

<dd>by Daniel J. Barrett and Richard Silverman

<dd>The Definitive Guide. OpenSSH is covered in detail.

<dt>TCP/IP Illustrated, Volume 1

<dd>by W. Richard Stevens

<dd>

Line 419

Line 380

Home enthusiasts, developers, and network administrators alike will enjoy this

book.

<dt>Kerberos: A Network Authentication System

<dd>by Brian Tung

<dd>

A guide for administrators of Kerberos-based networks. Explains concepts of

the Kerberos system, as well as the installation and administration of it.

<dt>IPsec: The New Security Standard for the Internet, Intranets and Virtual

Private Networks

<dd>by Naganand Doraswamy and Dan Harkins

Line 432

Line 395

This book explains the IPsec protocol suite. It also describes its relation

to the current deployments, such as VPNs, and future ideas.

<dt>Computer Networks

<dd>by Andy Tanenbaum

<dd>

Line 439

Line 403

a wide range of protocols, concepts, and technologies. It covers technologies

from fiber to wireless, LANs, Mobile IP, and a lot more.

<dt>DNS and BIND

<dd>by Paul Albitz and Cricket Liu

<dd>

This book is an excellent introduction to DNS and BIND, useful for

anyone who has to implement DNS under OpenBSD.

<dt>DHCP

<dd>by Ted Lemon and Ralph E. Droms

<dd>

Line 452

Line 418

which is the organization that produces the DHCP client/server software

included with OpenBSD.

<dt>Managing NFS and NIS

<dd>by Hal Stern

<dd>

Gives essential information with examples on managing NFS and NIS.

<dt>802.11 Security

<dd>by Bruce Potter and Bob Fleck

<dd>

Line 478

Line 446

to understand the field. Also, it has a very extensive reference section.

<dt>Handbook of Applied Cryptography

<dd>by Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone

<dd>A new and detailed look at Cryptography. The authors write:

Line 496

Line 465

from the book authors' site, in PDF or PostScript.

<dd>

<dt>SSL and TLS Essentials: Securing the Web

<dd>by Stephen A. Thomas

<dd>

Line 506

Line 476

integrity and details the SSL protocol.

<dd>

<dt>SSL and TLS: Designing and Building Secure Systems

<dd>by Eric Rescorla

<dd>

Line 518

Line 489

He has written several commercial and free SSL implementations.

<dd>

<dt>Big Book of IPsec RFCs: Internet Security Architecture

<dd>compiled by Pete Loshin

<dd>