"Linux Firewalls: Attack Detection and Response with iptables, psad, and fwsnort" - читать интересную книгу автора (Michael Rash)