Linux Network Services RH253

Prerequisites: Linux Administration 1 RH133

Duration: 5-days

Course to include RHCT Exam Guide.

1. Introduction to Network Services

  • Red Hat Enterprise Linux Network Components
  • Connecting Networks
  • Service Management
  • Chkconfig
  • xinetd Services
  • The xinetd Daemon
  • Fault Analysis

2. Organizing Networked Systems

  • DNS Basics
  • Internet DNS Hierarchy
  • Name Server Hierarchy
  • Client-Side DNS
  • Server-Side DNS
  • Berkeley Internet Name Domain (BIND)
  • Configuring BIND
  • Configuration File Basics
  • Address Match Lists and acl
  • rndc
  • Zone Files
  • Main Record Types
  • Delegating Subdomains
  • Caching-Only Name Server
  • BIND Utilities
  • BIND Syntax Utilities
  • Configuring the DHCP server

3. Network File Sharing Services

  • Configuring NFS Services
  • Configuring FTP Services
  • Samba Services
  • Samba Daemons
  • Configuring Samba
  • Configuring File and Directory Sharing
  • Printing to the Samba Server
  • Authentication Methods
  • Samba Client Tools: smbclient and smbmount

4. Electronic Mail Services

  • sendmail Features
  • Security and "Anti-Spam" Features
  • An E-Mail Review
  • Simple Operational Overview
  • Main Configuration Files
  • sendmail Configuration with the m4 Macro Language
  • sendmail Client Configuration
  • Blacklisting Recipients
  • Debugging sendmail
  • Postfix
  • Using Postfix
  • Additional Postfix Configuration Files
  • procmail Local Delivery

5. The HTTP Service

  • Apache Features
  • Apache Configuration
  • Apache Server Configuration
  • Virtual Hosts
  • Apache Namespace Configuration
  • CGI
  • Apache Encrypted Web Server
  • Squid Web Proxy Cache

6. Security Concerns and Policy

  • Security Terms
  • Basic Network Security
  • Which Services are Running?
  • Remote Service Detection
  • Definitions of Security
  • Security Policy
  • Backup Policies

7. Authentication Services

  • Authentication Basics
  • Service Profile: PAM
  • PAM Operation
  • Core PAM Modules
  • Authentication Modules
  • Password Security
  • Password Policy
  • Resource Limits
  • User Access Control
  • Single User Mode
  • Authentication Troubleshooting
  • NIS Overview
  • NIS Server Topology
  • Configuring an NIS Server
  • NIS Client Configuration
  • NIS Troubleshooting

8. System Monitoring

  • Introduction to System Monitoring
  • File System Analysis
  • Set User and Group ID Permissions
  • Typical Problematic Permissions
  • EXT2 Filesystem Attributes
  • Monitoring Data Integrity with tripwire
  • Configuring tripwire
  • System Log Files
  • syslogd and klogd configuration
  • Advanced syslogd configuration
  • Log File Analysis
  • Monitoring and Limiting Processes
  • Monitoring Processes with top
  • Monitoring Processes Graphically
  • System Activity Reporting
  • Process Accounting Tools

9. Securing Networks

  • Packet Filtering Capabilities
  • Netfilter Architecture
  • Netfilter Packet Flow
  • Chain Operations
  • Rule Targets
  • Rule Matching
  • Network Address Translation (NAT)
  • Connection Tracking
  • Rule Persistence
  • The "Bastion Host"

10. Securing Services

  • SystemV Startup Control
  • Securing the Service
  • tcp_wrappers Configuration
  • Daemon Specification
  • Client Specification
  • Advanced Syntax
  • xinetd-Based Security
  • xinetd Access Control
  • Host Patterns
  • Advanced Security Options

11. Securing Data

  • The Need for Encryption
  • Cryptographic Building Blocks
  • Random Numbers
  • One-Way Hashes
  • Symmetric Encryption
  • Asymmetric Encryption
  • Public Key Infrastructures
  • Digital Certificates
  • Generating Digital Certificates
  • OpenSSH Overview
  • The OpenSSH
  • OpenSSH Authentication
  • Protecting Your Keys
  • Applications: RPM

Labs
1. Introduction to Network Services
2. Organizing Networked Systems
3. Network File Sharing Services
4. Electronic Mail Services
5. HTTP Service
6. Security Concerns and Policy
7 Authentication Services
8. System Monitoring
9. Securing Networks
10. Securing Services
11. Securing Data