Linux Networking and Security Administration

Contenido

UNIT 1 Introduction to System Services

• Service Management

• Services Managed by init

• System V Service Management

• chkconfig

• xinetd Managed Services

• The xinetd Daemon

• xinetd default controls

• xinetd service controls

• The /etc/sysconfig/ files

• Fault Analysis

• Security Enhanced Linux

• SELinux


UNIT 2 Organizing Networked Systems

• Domain Name System(DNS)

• Zones, Domains & Delegation

• Name Server Hierarchy

• The DNS Server

• Configuring BIND

• Global Options

• Address Control Lists (acl)

• Name Daemon Control Utility (rndc)

• Master and Slave Zones

• Reverse Lookup Zones

• Special Zones

• Zone Files

• Resource Records (RR)

• SOA (Start of Authority)

• NS (Name Server)

• Delegating Subdomains

• BIND Syntax Utilities

• Caching-only Name Server

• BIND Utilities

• Advanced BIND Features

• DHCP Overview

• Service Profile: DHCP

• Configuring a DHCP Server


UNIT 3 Network File Sharing Services

• NFS File Service(NFS)

• Service Profile: NFS

• NFS Server

• Client-side NFS

• Samba Services

• Samba Daemons

• Service Profile: SMB

• Configuring Samba


UNIT 4 Electronic Mail Services

• Sendmail Features

• An Email Review

• Server Operations

• Service Profile: Sendmail

• Main Configuration Files

UNIT 5 The HTTP Service

• Apache Overview

• Service Profile: HTTPD

• Apache Configuration

• Apache Server Configuration

• Virtual Hosts

• Apache Namespace Configuration

•Apache Access Configuration

• Using .htaccess Files

• CGI

UNIT 6 Security Concerns and Policy

• Definition of Security

• Attacks from the Network

• Principles of Security

• Security Practices

• Diagnostic Utilities

• Which Services Are Running?

• Remote Service Detection

• Isolate Vulnerabilities

• Security Policy: the System

• Security Policy: the People

• Response Strategies


UNIT 7 Authentication Services

• User Authentication

• Account Information

• Name Service Switch

• PAM

• PAM Operation

• Password Security

• Password Policy

• NIS Server Configuration

• Configuring a Master Server

• Configuring a Slave Server


UNIT 8 Introduction to System Monitoring

• File System Analysis

• Set User and Group ID Permissions

• Typical Problematic Permissions

• Ext2/3 Filesystem Attributes

• System Log Files

• syslogd and klogd Configuration

• Advanced syslogd Configuration

• Log File Analysis

• Monitoring Processes

• Process Monitoring Utilities

• System Activity Reporting

• Limiting Processes

• Process Accounting Tools


UNIT 9 Securing Networks

• IP Forwarding

• Routing

• Netfilter

• Rule Matching

• Match Criteria (filter table)

• TCP Match Extensions (filter table)

• UDP and ICMP Match Extensions

• Match Arguments

• Chain Criteria


UNIT 10 Securing Services

• Securing the Service

• tcp_wrappers Configuration

• Daemon Specification

• Client Specification

• Advanced Syntax

• Options

• Example

• Securing xinetd-managed services