Description

This course is intended for Network Administrators or other personnel, who are responsible for the configuration, use and support of network services on a Red Hat Linux system. On this course delegates will learn how to utilise TCP/IP network services such as DNS, NIS and DHCP and also how to configure network security on a Red Hat Linux system.

Course pre-requisites:

Delegates should have solid UNIX or Linux systems administration experience. This knowledge can be gained by attending course RH133GB (Red Hat Linux System Administration I, II).

Covered on the Red Hat Linux Networking & Security Administration course

Domain Name Service

1. DNS Features
2. Internet DNS Hierarchy
3. Zone Authoritative Name Server Hierarchy
4. Client-side DNS Operation
5. Server-side DNS Operation
6. Berkeley Internet Name Domain
7. Configuring BIND 8
8. Configuration File Basics
9. Global Options
10. Master Zones
11. Slave Zones
12. Reverse Lookup Zones
13. Special Zones
14. BIND 8 Database Files
15. Resource Records (RR)
16. The Start of Authority (SOA) Record
17. The Name Server (NS) Record
18. The A, CNAME and PTR Records
19. The MX and HINFO Records
20. Dividing Up Domains
21. Cache Only Name Service
22. Round Robin Load Sharing through DNS
23. BIND Utilities

Samba

1. Overview of Samba
2. History
3. Services and Servers
4. Configuring Samba
5. Overview of smb.conf Sections
6. Configuring File and Directory Sharing
7. Enabling WINS Support
8. Printing to the Samba Server
9. Authentication Methods
10. Configuration Test Tool
11. Samba Client Tools: smbclient and nmblookup
12. Linux-Exclusive Features: smbmount
13. Linux-Exclusive Features: Samba mounts in /etc/fstab
14. Encrypted Passwords

Network Information Service

1. NIS Overview
2. NIS History
3. NIS Servers
4. NIS Clients
5. The /etc/nsswitch.conf File
6. Server-side NIS Configuration
7. Configuring a Master Server
8. Configuring a Slave Server
9. Debugging NIS with rpcinfo
10. NIS Client-side Basics
11. Client-side NIS Configuration
12. Client Configuration using authconfig
13. Client Tools
14. Lightweight Directory Access Protocol (LDAP)
15. LDAP Support/Configuration

Mail Delivery with Sendmail

1. Sendmail Overview
2. Sendmail Features
3. Security and "Anti-Spam"
4. Email Overview
5. Simple Operational Overview
6. Configuration Files
7. Client Configuration
8. Configuration with the m4 Macro Language
9. Sendmail m4 Macro File: Introduction
10. Sendmail m4 Macro File: Features
11. Other Valuable m4 Directives
12. Advanced /etc/mail Files
13. /etc/mail/virtusertable
14. /etc/mail/access
15. Blacklisting Recipients
16. Debugging sendmail
17. Procmail Local Delivery
18. Procmail Simple Configuration

Apache

1. Apache Overview
2. Apache Features
3. Apache Server Configuration
4. Virtual Hosts
5. Namespace Configuration
6. Apache Access Configuration
7. Using the .htaccess Files
8. CGI
9. Apache Modules
10. Apache Encrypted Web Server

Network Services - FTP, NFS, DHCP and PPP

1. File Transfer Protocol (FTP)
2. Network File System (NFS)
3. File Sharing
4. NFS Server
5. Client-side NFS
6. Red Hat Linux Network Installation Server
7. Dynamic Host Configuration Protocol (DHCP)
8. Setting-up a DHCP Server
9. DHCP Configuration
10. Client-side DHCP
11. Point-to-Point Protocol (PPP)
12. Dialup Servers
13. PPP Server Configuration
14. Specifying pppd Options
15. Restricting PPP Users

Introduction to Security

1. Basic Security Implementation
2. Definitions of Common Terms
3. Common Security Breaches
4. Physical Security
5. Single User Mode with LILO
6. Boot Loader Security with LILO
7. Network Security
8. Security Policies
9. Backup Policies
10. Responding to a Break-in

Local User Security

1. Securing User Accounts
2. Authentication with PAM
3. PAM Configuration Files
4. PAM Application Configuration
5. PAM Central Configuration
6. Restricting Root Logins
7. Restricting User Login
8. Allowing Console Users to Control the System
9. Allowing Users Root Privileges
10. Monitoring the Local System

Files and File System Security

1. SUID and SGID Permissions
2. Additional File Modes
3. Typical Problematic Permissions
4. Cleaning Files and Directories
5. Data Integrity with tripwire

Password Security and Encrypted Communications

1. The Need for Encryption
2. Cryptographic Building Blocks
3. Random Numbers
4. One-way Hashes
5. Symmetric Encryption
6. Asymmetric Encryption
7. Public Key Infrastructures
8. Digital Certificates
9. Generating Digital Certificates
10. Applications: openssh
11. Applications: stunnel
12. Display Security

Process Security and System Monitoring

1. Monitoring/Limiting Processes
2. Monitoring Processes with top
3. Monitoring Processes Graphically
4. Limiting Processes
5. Process Accounting Tools
6. Logs to Monitor Processes

Service-Based Security/Firewalls

1. Type of Firewalls
2. The xinetd Daemon
3. TCP Wrappers
4. Linux as a Router and Masquerader
5. Static and Dynamic Routes
6. Firewalls
7. Packet Filtering Firewall Tasks
8. Compiling the Linux Kernel for Packet Firewalling
9. What is ipchains?
10. Path of Packets Through the Kernel
11. Basic Chain Handling
12. Sample ipchains Commands
13. Building a Firewall with ipchains
14. IP Masquerading
15. Enabling Masquerading

Security Tools

1. Host Auditing Tools
2. Packet Sniffers
3. Using tcpdump to Monitor Traffic
4. Options for tcpdump
5. Network Monitoring Tools