Sort of answering my own question here, but the latest issue of Sys Admin just arrived and this looks like a good one. Lots of stuff on Netfiler/iptables and also lots of Kerberos stuff this month. This magazine pays for the whole year's subscription with just one issue like this.