bhbh_77
16-09-2008, 20:59
Linux Network Administration Essentials
Module 7, Part 7 of linux Admin Essential
# Linux Network Administration Essentials - Module 7
* Discuss & demonstrate the usage of commonly used networking tools:
* PING - Demonstrate PING flooding of remote hosts - ICMP Attack Techniques
* PING - Cisco PIX Integration & Debugging of ICMP Echo Requests/Echo Replies
* Traceroute - Cisco PIX Integration & provisioning of ICMP traffic types
* MTR (PING & Traceroute functionality) plus Cisco PIX debugging of ICMP data flow
* ARP
* NETSTAT/LSOF
* IFCONFIG
* Route
* DIG & NSLOOKUP
* Whois
* Who, w, wc, last, cat, grep, vi, pico, head, tail, etc.
* Message of the day banners (MOTD), /etc/issue file (pre-login banner/display info.)
#
# Implement Dynamic Host Configuration Protocol (DHCP) services
* Explain the various steps of the DHCP process
* Configure global & scope-level DHCP options
* Configure IP reservations based on layer 2 MAC addresses
* Disable Cisco PIX DHCP services
* Enable Linux DHCP services
* Configure Windows 2003/XP/Linux clients to receive dynamic addresses from Linux
#
# Discuss Xinetd super server concepts and applications
* Identify services controlled by Xinetd
* Enable & disable Xinetd-controlled services & examine results
* Implement access control on Xinetd controlled services
* Implement Xinetd IP and port-level daemon redirection
* Discuss Xinetd & TCP Wrappers relationship and dual-layer security benefits
#
# Implement Very Secure VSFTPD File Transfer Protocol (FTP) services
* Implement anonymous FTPD
* Implement user-level FTPD access
* Implement FTPD banners
* Disable anonymous access
* Configure VSFTPD to run under the auspices of Xinetd super server for increased security
* Implement bandwidth rate-limiting to control bandwidth usage
#
# Discuss Linux & Windows Integration via Samba
* Install Samba support
* Install Samba Web-based Administration Tool (SWAT)
* Configure Samba file & print sharing
* Evaluate access to Samba file & print server
* Configure Samba Windows Internet Name Server (WINS) support
* Evaluate Windows XP/2003 client access to Samba-WINS server
#
# Discuss the Network File System (NFS) concepts and Linux support
* Implement the NFS daemon
* Review /etc/exports parameters and options
* Evaluate access to NFS exports
* Implement NFS connectivity across a WAN connection via IPSEC VPN-connectivity
#
# Discuss the CRON scheduling system concepts and application
* Identify various predefined CRON entries and schedules
* Define custom cron jobs system-wide
* Define custom cron jobs user-wide
* Evaluate results of cron jobs
#
# Implement the Berkeley Internet Daemon (BIND) Domain Name Server (DNS)
* Implement BIND 9.x
* Configure BIND as a caching-only DNS server
* Test caching-only name resolution from Windows 2003 & Linux hosts
* Secure access to caching-only/recursive name server via ACLs
* Configure BIND as a primary DNS server
* Test primary name resolution from Windows 2003 & Linux hosts
* Configure BIND as a secondary(slave) DNS server
* Restrict communications between primary & secondary DNS servers
* Implement updates between master and secondary DNS servers via IPSEC VPN
* Configure DNS zones on Linux BIND & Windows 2003 DNS - activate replication
* Implement poor man's load balancing using DNS round robin
* Evaluate results of BIND configuration using DIG
* Configure DNS zones
* Configure zone transfers
* Configure secure-zone transfers
* Evaluate BIND's configuration files named.conf & named.custom
* Configure BIND sub-domain delegation. i.e. internal.linuxcbt.net
* Configure BIND to support reverse domains
* Configure Linux/Windows 2003 clients to use Linux BIND DNS server
* DNS Transaction Signatures (TSIG) implemenation
* Identify BIND logging information for troubleshooting purposes
* Configure BIND DNS with IP Aliasing (Sub-Interfaces) to host DNS on separate IP address
#
# Implement Network Monitoring & Graphing tools using SNMP, etc.
* Implement Multi Router Traffic Grapher (MRTG)
* Graph Cisco Firewall with MRTG
* Implement Cacti Network Graphing Tool
* Download and Install Cacti and required components (RRDTool, MySqL, etc.)
* Explore Cacti Interface, options, etc.
* Graph Cisco, Linux & Windows 2003 resources with Cacti using SNMP & Scripts
#
# Implement Network Time Protocol (NTP) & Time Synchronization services for local subnets
* Discuss features and distributed nature of the hierarchial NTP service
* Ascertain and select optimal Stratum 1 NTP servers for synchronization
* Review default NTP configuration
* Configure NTP to synchronize with NTP servers
* Configure internal Linux clients to syncrhonize with internal Stratum 2 NTP server
* Configure Cisco PIX firewall to synchronize with internal Stratum 2 NTP server
* Use NTP-related tools such as NTPQ, NTPTRACE to ascertain NTP-related information
Download
http://rapidshare.com/files/63555835/LX-CB-NET-AD.part1.rar
http://rapidshare.com/files/63557455/LX-CB-NET-AD.part2.rar
http://rapidshare.com/files/63556982/LX-CB-NET-AD.part3.rar
http://rapidshare.com/files/63559002/LX-CB-NET-AD.part4.rar
http://rapidshare.com/files/63557567/LX-CB-NET-AD.part5.rar
http://rapidshare.com/files/63553651/LX-CB-NET-AD.part6.rar
http://rapidshare.com/files/63549674/LX-CB-NET-AD.part7.rar
Module 7, Part 7 of linux Admin Essential
# Linux Network Administration Essentials - Module 7
* Discuss & demonstrate the usage of commonly used networking tools:
* PING - Demonstrate PING flooding of remote hosts - ICMP Attack Techniques
* PING - Cisco PIX Integration & Debugging of ICMP Echo Requests/Echo Replies
* Traceroute - Cisco PIX Integration & provisioning of ICMP traffic types
* MTR (PING & Traceroute functionality) plus Cisco PIX debugging of ICMP data flow
* ARP
* NETSTAT/LSOF
* IFCONFIG
* Route
* DIG & NSLOOKUP
* Whois
* Who, w, wc, last, cat, grep, vi, pico, head, tail, etc.
* Message of the day banners (MOTD), /etc/issue file (pre-login banner/display info.)
#
# Implement Dynamic Host Configuration Protocol (DHCP) services
* Explain the various steps of the DHCP process
* Configure global & scope-level DHCP options
* Configure IP reservations based on layer 2 MAC addresses
* Disable Cisco PIX DHCP services
* Enable Linux DHCP services
* Configure Windows 2003/XP/Linux clients to receive dynamic addresses from Linux
#
# Discuss Xinetd super server concepts and applications
* Identify services controlled by Xinetd
* Enable & disable Xinetd-controlled services & examine results
* Implement access control on Xinetd controlled services
* Implement Xinetd IP and port-level daemon redirection
* Discuss Xinetd & TCP Wrappers relationship and dual-layer security benefits
#
# Implement Very Secure VSFTPD File Transfer Protocol (FTP) services
* Implement anonymous FTPD
* Implement user-level FTPD access
* Implement FTPD banners
* Disable anonymous access
* Configure VSFTPD to run under the auspices of Xinetd super server for increased security
* Implement bandwidth rate-limiting to control bandwidth usage
#
# Discuss Linux & Windows Integration via Samba
* Install Samba support
* Install Samba Web-based Administration Tool (SWAT)
* Configure Samba file & print sharing
* Evaluate access to Samba file & print server
* Configure Samba Windows Internet Name Server (WINS) support
* Evaluate Windows XP/2003 client access to Samba-WINS server
#
# Discuss the Network File System (NFS) concepts and Linux support
* Implement the NFS daemon
* Review /etc/exports parameters and options
* Evaluate access to NFS exports
* Implement NFS connectivity across a WAN connection via IPSEC VPN-connectivity
#
# Discuss the CRON scheduling system concepts and application
* Identify various predefined CRON entries and schedules
* Define custom cron jobs system-wide
* Define custom cron jobs user-wide
* Evaluate results of cron jobs
#
# Implement the Berkeley Internet Daemon (BIND) Domain Name Server (DNS)
* Implement BIND 9.x
* Configure BIND as a caching-only DNS server
* Test caching-only name resolution from Windows 2003 & Linux hosts
* Secure access to caching-only/recursive name server via ACLs
* Configure BIND as a primary DNS server
* Test primary name resolution from Windows 2003 & Linux hosts
* Configure BIND as a secondary(slave) DNS server
* Restrict communications between primary & secondary DNS servers
* Implement updates between master and secondary DNS servers via IPSEC VPN
* Configure DNS zones on Linux BIND & Windows 2003 DNS - activate replication
* Implement poor man's load balancing using DNS round robin
* Evaluate results of BIND configuration using DIG
* Configure DNS zones
* Configure zone transfers
* Configure secure-zone transfers
* Evaluate BIND's configuration files named.conf & named.custom
* Configure BIND sub-domain delegation. i.e. internal.linuxcbt.net
* Configure BIND to support reverse domains
* Configure Linux/Windows 2003 clients to use Linux BIND DNS server
* DNS Transaction Signatures (TSIG) implemenation
* Identify BIND logging information for troubleshooting purposes
* Configure BIND DNS with IP Aliasing (Sub-Interfaces) to host DNS on separate IP address
#
# Implement Network Monitoring & Graphing tools using SNMP, etc.
* Implement Multi Router Traffic Grapher (MRTG)
* Graph Cisco Firewall with MRTG
* Implement Cacti Network Graphing Tool
* Download and Install Cacti and required components (RRDTool, MySqL, etc.)
* Explore Cacti Interface, options, etc.
* Graph Cisco, Linux & Windows 2003 resources with Cacti using SNMP & Scripts
#
# Implement Network Time Protocol (NTP) & Time Synchronization services for local subnets
* Discuss features and distributed nature of the hierarchial NTP service
* Ascertain and select optimal Stratum 1 NTP servers for synchronization
* Review default NTP configuration
* Configure NTP to synchronize with NTP servers
* Configure internal Linux clients to syncrhonize with internal Stratum 2 NTP server
* Configure Cisco PIX firewall to synchronize with internal Stratum 2 NTP server
* Use NTP-related tools such as NTPQ, NTPTRACE to ascertain NTP-related information
Download
http://rapidshare.com/files/63555835/LX-CB-NET-AD.part1.rar
http://rapidshare.com/files/63557455/LX-CB-NET-AD.part2.rar
http://rapidshare.com/files/63556982/LX-CB-NET-AD.part3.rar
http://rapidshare.com/files/63559002/LX-CB-NET-AD.part4.rar
http://rapidshare.com/files/63557567/LX-CB-NET-AD.part5.rar
http://rapidshare.com/files/63553651/LX-CB-NET-AD.part6.rar
http://rapidshare.com/files/63549674/LX-CB-NET-AD.part7.rar