Network Security Hacks 
by Andrew Lockhart

The following errata were *corrected* in the 4/05 reprint:

Here's a key to the markup:
	[page-number]: serious technical mistake
	{page-number}: minor technical mistake
	<page-number>: important language/formatting problem
	(page-number): language change or minor formatting problem



(136), 3rd para
"keeping out everyone but those who are determined to undermine your logging 
infrastructure"

NOW READS:
"keeping out everyone but those who are the most determined to undermine 
your logging infrastructure"


(158), code in mid of page, line 2
"--with-nagis-grp=nagios"

NOW READS:
"--with-nagios-grp=nagios"


(169), 2nd-to-last text paragraph
"This command will ... write its logs to /tmp/argus."

NOW READS:
"This command will ... write its logs to /tmp/arguslog."



(173), mid of page
"To create a pcap.ini"

NOW READS:
"To create a rpcapd.ini"



(176), 2nd paragraph, first sentence;
"Ipsec-based"

NOW READS:
"IPsec-based"


(177), line 13 from bottom
"Ipsec" 

NOW READS:
"IPsec"


(191), line 1
"-L8080"

NOW READS:
"-L8000"



(227), para in mid of page, line 3-4
"Snort's ... processors"

NOW READS:
"Snort's ... preprocessors"



(245) 2nd paragraph, 3rd line
"run" was previously formatted as "literal" text.

This HAS BEEN CORRECTED and now appears as normal body text.



(249), 6th text paragraph
"when you when you want to..."

NOW READS:
"when you want to..."


AND

"on the host that the firewall is install fwexec or fwsamed on" 

NOW READS:
"on the host that the firewall is installed on"
  (delete " fwexec or fwsam")



(258), line 10
"directory" was previously formatted in constant-width font.

THIS HAS BEEN CORRECTED and appears in normal body text font.




(260), line 8
"sessiondid"

NOW READS:
"sessionid"


(262), 2nd paragraph, 5th line;
Missing space between "standard" and "./configure"
HAS BEEN CORRECTED.



(265), line 4-5
"to forward any port to a host on another machine"

NOW READS:
"to forward any port to a port on another machine"


(277) (+ Indexentry on page 295 for "system binaries:verifying ...")
Six occurences of "chrootkit" (page 277) and Index entry 

NOW READ:
"chkrootkit"


(289), left column, "mail transfer agents (MTAs)"
"support for FLS"

NOW READS:
"support for TLS"