N302

N302: Red Hat Linux Networking & Security Administration - 4 Days

Who Should Attend:

This module is intended for Linux and/or UNIX systems administrators who want to build skills at configuring common network services and security administration with Red Hat Linux.

Prerequisites:

A solid background in TCP/IP is expected.

Objectives:

This module is intended for Linux and/or UNIX systems administrators who wish to develop or improve their skills at configuring common network services and security administration with Red Hat Linux. The participant should be able to perform system administration tasks like setup, configure common network services and security at an acceptable level.

Contents:

Networking Components in Linux: Linux Network Components, Connecting Networks, Service Management, chkconfig, xinetd Services, The xinetd Daemon.

BIND and DNS: Configuring BIND, Configuration File Basics, Address Match Lists and acl, Zone Files, Main Record Types, Delegating Subdomains, Caching-only Name Server, Round Robin Load Sharing through DNS, BIND Utilities, rndc, BIND Syntax Utilities.

NFS, FTP and DHCP Services: FTP, NFS File Sharing, NFS Server, Client-side NFS, DHCP Overview, Configuring a DHCP Server, DHCP Configuration Example

Email: sendmail Features, Security, Main Configuration Files, sendmail Configuration, sendmail Client, Blacklisting Recipients, Debugging sendmail, procmail Local Delivery

Web Connectivity: Apache Features and Configuration, Apache Server Configuration, Virtual Hosts, Apache Namespace, CGI setup, Security, Squid Proxy.

Connecting to MS Windows® Networks: Samba Services, Samba Daemons, Configuring Samba, Configuring File and Directory Sharing, Enabling WINS Support, Printing to the Samba Server,

Authentication Methods, Clients: smbclient, nmblookup, smbmount.

Security at Large: Security Policy, Intrusion Detection, Responding to a Break-In, Backup Policies, Authentication Basics, Service Profile: PAM, Authentication Modules, Password Security and Policy, User Access Control, Single User Mode, Authentication Troubleshooting, Configuring an NIS Server/Client Configuration, NIS Troubleshooting, System V Startup Control, Remote Service Detection, Securing the Service, tcp_wrappers Configuration Daemon Specification, Advanced Syntax, xinetd-based security, xinetd Access Control, Advanced Security Options.

Encryption: Encryption basics, Cryptography, Symmetric Encryption, Asymmetric Encryption, Public Key, Digital Certificates, OpenSSH, OpenSSH Authentication, Public/Private key security, RPM Security

Monitoring and Logging: File System Analysis, Set User and Group ID Permissions, Typical Problematic Permissions, EXT2 Filesystem Attributes, Monitoring Data Integrity with tripwire, Configuring tripwire, System Log Files, syslogd and klogd configuration, Advanced syslogd configuration, Log File Analysis, Monitoring and Limiting Processes, Monitoring Processes with top, Monitoring Processes Graphically System Activity Reporting, Process Accounting Tools.

Protecting your Network: Packet Filtering Capabilities, Chain Operations, IP Chains in detail, Rule targets, Rule Matching, Network Address Translation (NAT), Connection Tracking, Rule persistence, The "Bastion Host".

--------

Contact Us Today for enquiries on courses