|
Server
Maintenance Lab Manual
This is over 550 pages of 11 x 8.5 lay flat manual.
Labs Highlighted in Green
Outline Categories in Blue
Introduction
Historical Development of Linux
Researching Distributions
The Choice of an Enterprise Server
Finding Help
Tasks of a Linux Administrator
The Boot Process
(Ubuntu Manual Covers Upstart)
The BIOS
GRUB
Init Process
Startup Scripts
Daemons
rc.d Directory
Lab 2.1 : List Current Services Listed
in /etc/rc.d/init.d
Run Scripts at Startup
rc.local
Interactive Startup
Configuration of the Boot Process
Reboot and Shut Down
Lab 2.2 : Shutting Down Correctly and Restarting
Managing
Services
Lab 2.3 : Managing Services
Practice 2.4: Changing init
The root User
Access Control
root Login
Setuid and setgid
Lab 3.1: Setting the SUID Bit
How to Use su root
Lab 3.2: Checking the PATH
sudo
Passwords
Lab 3.3: Set Up sudoers
Process Management
Managing Processes
Nice
Creation of Process
Signals 38
How to Kill Processes
Process States
ps
top
/proc File System
Tracing System Calls
Dealing with Wild Processes
Managing the File System
Pathnames
Mounting/Unmounting File Systems
A Linux Standard
File Types
File Permissions
setuid and setgid bits
Lab 5.1: Control Group Ownership with SGID
sticky bit
File Attributes
Links
Change File Permissions - chmod
Change Ownership – chown
umask
Lab 5.2: Understanding the /proc Directory
ACLs
Managing Users
Lab 6.1: Change User Information
/etc/shadow
/etc/group
Creating Users
Files When a User is Created
Passwords
Password Control
Check Password
Lab6.2 : Add a User in Text Mode
Deleting Users and Data
Change File Ownership
chsh
Communication With Users
Managing Users From the GUI
User and Group Security
Attack Source
Pseudo-Users
Monitoring User Activity with psacct
Managing Quotas
quota Commands
Start Quotas
Setup User Quotas
Setup group Quotas
Create Profiles
Turn Quotas Off
Maintain Quotas
Lab 7.1 : User Quotas
Lab 7.2 : Group Quotas
Managing System Logs
Special Log Files
View System Logs
Log Watch
Create a New alias
Create Remote Logs
View Remote Files
Altered Log Files
Security Steps for Logs
Modify Log Output
Add Program Logs
Lab 8.2 Log Management
Managing Hard Drives
IDE Drives
Sata Drives
SCSI
Drive Geometry
Partitions
Swap Space
Formatting Floppy Drives
Using fdisk to Create Partitions
Listing Partitions With fdisk
View Partitions
Delete Partitions
All Partitions Deleted
New Partition Created
File System Formats
Mounting Drives
Enhancing Hard Drive performance
fstab
Add an Additional Device
Lab 9.1: Checking Hard Drive Performance
Lab 9.2: Create RAID 5 with LVM
Managing Backups
Backup Media
Using tar
Search the Contents of a tar File
Simple tar Script
Using dd to Clone Drives
Build an Image Server
Check Free Space
Lab 10.1 Simple tar Backup
Lab 10.2 Backup /home Directory
Lab 10.3 Backup /home Directory with Script
Lab 10.4 rsync
Lab 10.5 Backup /home Directory with Script
Managing Automated Actions
Using at
Lab 11.1: Using at
Lab 11.2: Backup
Using cron
Managing Updates
yum.conf
yum Log
yum Repositories
Updating
Install New Programs
Remove Programs
Basic Networking
LAN - Local Area Network
WAN - Wide Area Network
OSI Layers
Ethernet Media
Network Design
Network Relationship
Using Network Commands
Important Network Files
Ping
Webmin: Remote Access
Lab 12.1 : Webmin Security
Lab 12.2 : Webmin Options
VNC Remote Access
Create Users
Start the Server
Set VNC Server to be On at Boot
Client Login
Lab 13.1 : VNC Server
SSH – Secure Remote Access
SSH Files and Locations
SSH Basics
Generate a Key Pair
Permissions for .ssh Directory
Preventing Man in the Middle
Authentication
Known Hosts
Fingerprints
Making Connections
Initializing a Connection to a Server
Transfer Files Using scp
Transfer Remote File to Local Machine
Transfer a Directory to Remote Server
Using sftp for Secure File Transfer
Remote X Window With SSH
Change Port Number on Client
Connect With Keys Only
Project: SSH Connect Without Passwords
Change Port Number on Client
Config File
Transferring Files With FileZilla
Connecting With FileZilla
LAB 14.5: SSH Move Directories
Kernel Development
How to Configure the Kernel
LAB 17.1: Tune Kernel Parameters
Load Drivers and Modules into an Existing Kernel on the Fly
Practice: Add and Remove a Module
Practice: Load All SCSI Drivers
Build a New Kernel
Lab 17.4: Kernel Development
Provide Directives at boot time to the Kernel
X Window System
X Window Components
X Display Manager
X Applications
Client Authentication
X Server Configuration
Server Security
Preventative Server Security
Layered Security
Reducing Spam and Attack by Limiting IP Addresses
Lab 17.1: iptables Firewall
Restrict Physical Access to Servers
Securing Services
Lab 17.2: List Current Services Listed
in /etc/rc.d/init.d
Managing Services
Lab 17.3: Managing Services
Manage xinetd
Lab 17.4: Enabling rsync
Lab 17.5: Manage Access Control
tcp_wrappers
Lab 17.6: Configuring tcp_wrappers
Verify Running Services with netstat
Securing The Firewall
Port Scan Attack Detector (psad)
psad Configuration File
Bastille Linux
Lab 17.7: Security Assessment
Bastille Questions
Securing the Network Connections
Lab 17.8: Review history
Lab 17.9: Review /etc/passwd
Using nmap
Ping Sweep
Securing Users
root Login
How to Use su root
Passwords
User and Group Security
Attack Source
Deleting Users and Data
Firewall Introduction
Iptables
Terminology
Firewall Strategies
Network Tools
Lab 17.10 : Network Monitoring
Darkstat
Wireshark (Ethereal)
Remedial Server Security
Rkdet
Tripwire
AIDE
Lab 17.11 : Rootkit Hunter
Lab 17.12 : AIDE
Logwatch
Social Engineering
|
Server
Daemons Lab Manual
Almost 600 pages of 11 x 8.5 lay flat manual.
Labs Highlighted in Green
Outline Categories in Blue
SELinux
(Ubuntu
Manual covers AppArmor)
SELinux Decision Making Process
Lab 19.1: Review SELinux Settings
Using setroubleshoot
Lab 19.2: Load and Test setroublshoot
Apache
Server
New Features in Apache 2.0
Main Configuration Files
httd.conf
Lab 19.3 Apache Install and Configuration
Modules
SELinux with Apache
LAB 19.4: Managing SELinux with Apache
Loading Additional Modules
Making Modifications to Apache
Performance Tuning
Lab 19.5 Performance Tuning
Configuring the Number of Servers
Log Files
Lab 19.6 Viewing and Searching Logs
Virtual Hosting
Lab 19.7 Virtual Hosts for a Web Server
IP Based Hosting
MIME Type
Adding a MIME Type
Index Files
Access Control
Password Authentication
Lab 19.8 Create a Restricted Folder
.htaccess File
Setup CGI
Enable CGI scripts
Enhancing CGI Scripts
Start / Stop / Restart Apache
Start Apache at boot
Intro to SSL
What the Process of SSL Provides
SSL Communication
Encryption Configuration
Unsigned SSL Certificate
Creating an SSL Certificate
Process of Setting Up Certificate
Lab 19.9 Create a
Self-Signed Certificate
Add SSL to Apache
Use Pre-Existing Keys
Upgrading an Older Server
Generate New Keys
Install PHP
Lab 19.10 Install PHP
MySQL
Lab 19.11 MySQL Basics
Lab 19.12 MySQL Checks
Joomla Content Management
Installation
Lab 19.13 Joomla Install
Joomla Security
Lab 19.14 Securing Joomla
Squid Proxy Server
Important Locations
Runat Startup
Hardware Requirements
Visible Hostname
Administrative Contact
Lab 20.1 Basic Squid Set Up
Regular Expressions
Lab 20.2 Using Regular Expressions
Authentication for Squid
Lab 20.3 Authenticating to Squid
VSFTP Server
Security Issues With FTP
Lab 21.1 Basic VSFTP Setup
Setting a umask
FILE PERMISSIONS
Create Anonymous Login
Controlling Access
Access Control With tcp_wrappers
Lab 21.2 Enable Local Access Only
Create Warning Banner
Set Up Virtual FTP
vsftp Man Page
vsftpd Company Example
/etc/hosts.allow
Security Options
Start the Server
Server Listening
Configure the Firewall
Bastille Firewall
Logging In as User
Graphical Login
Limiting Users
Anonymous Server Setup
Anonymous Directory
Create a Login Banner
Lab 21.3 Create Server with Anonymous Logins
Anonymous Login
iptables Firewall
VSFTPD ans SELinux
Lab 21.4 Enhance Security Settings
Network
File System
Uses for NFS
Quick Start
LAB 22.1 Basic NFS Set Up
LAB 22.2 Basic NFS Set Up with GUI
Sendmail Server
Sendmail Introduction
Mail Server Basics
Mail Access Protocols
Sendmail Basic Install
Sendmail Foundations
Foundation #1: Configuration Files
Foundation #2: The Queue
Foundation #3: Aliases
Lab 23.1 Mail Exercise
How Sendmail Works
Setting the Operating Mode
Daemon Mode
Queue Mode
Verbose Mode
Major Configuration Files
Creating VirtualUsers
Allowing Network Connections
Sendmail Security
Monitor Security Issues
M4 Processor
How to Use the M4 Processor
Control SPAM
Deny Relaying
Use the Access Database
access
Leave Spammer a Message
Use a Blackhole List Service
Reducing Spam and Attack by Limiting IP Addresses
Stop User Replys to SPAM
Lab 23.2 Testing the Basic Setup
Check Mail Stats
Undeliverable Mail
Mail Stats
Testing an Address
Mail Does Not Send
Rejected Mail
Lab 23.3 Sendmail Practical
DNS Server
How DNS Works
Delegation
named.conf
Zone File Examples
DNS Server
DNS Service
DNS Client
DNS Server Design
Options Statement
Zone Statements
Create a Zone Statement
Mail Requirements
Graphical Tools
Fully Qualified Domain Name
hosts
Hierarchical Structure
Top Level Domains
Name Servers
Zones vs Domains
Types of Name Servers
Registering a Domain
Lame Server
Forwarding
Test DNS Settings
Creating a chroot Jail
Install the Jail
Configure the Jail
Lab 24.1 DNS Step By Step Install Practical
Samba
Server
Samba Introduction
Samba Install and Start
smb.conf
testparm
Sections in smb.conf
Create Shared Directory
LAB 24.1 Create a Public Share
NetBIOS and WINS
Browsing the Network
Creating User Accounts
Home Directories
LAB 24.2 Manage Home Directories
Managing Groups
LAB 24.3 Manage Groups
Recycle Bin
LAB 24.4 Create a Recycle Bin
Variables
LAB 24.5 Using Variables
Virtual Samba Servers
Network Access Options
LAB 24.6 Network Access
Printing
Privileges
DHCP Server
Basic Tips
LAB 25.1 DHCP Server
Iptables
Command Conventions
Direction of Packet Flow
Tables, Chains and Targets
Rule Targets
Chain Functions
Listing Tables
Deleting User-defined Chains
Flushing Tables
Setting the Default Policy
Matching Source IP Addresses
Matching Destination IP Address
Controlling Port Matches
Matching Protocol
Saving iptables
Lab 26.1 Basic iptables
Lab 26.2 Securing a Samba Server
Lab 26.3 Prevent SSH Attack
NAT
MASQUERADE
SNAT
DNAT
REDIRECT
Firewall Piercing Protocols
A Simple Triple-Homed NAT Configuration
Packet Filtering
Packet Mangling
filter Chains
filter Targets
A Triple-homed Packet Filtering Configuration
A Triple-homed Packet Filtering Configuration Script
Packet Forwarding Filters
A Triple-homed Packet Forwarding Configuration Script
Host Security
Host Packet Filtering Configuration Script
Save and Restore
Stream Filtering Utilities
The stderr redirector
tee
tac
cut
paste
join
sort
expand
unexpand
streams
head
tail
od
uniq
wc
fmt
split
tr
xargs
Regular Expressions
sed
grep
Wildcard
ls
|
