Winter 2009 NAD810 Weekly Schedule

Welcome the Linux Network Administration.

Week 1 (January 12) - Overview of TCP/IP and Configure Networking Environment

• Setting up a small (4 nodes) physical Local Area Network
• Setting up a Virtual Local Area Network using FC10
• Review of end-node and gateway network configuration
• Manual and automatic network configuration

Lab 1

Study the virtualization platform on Fedora Core 10
                 or
Set up a Four-node LAN in Lab T2107 

If you want to use VMWare, Check here for pre-build virtual machine images for VMWare

Week 2 (January 19) - Protecting your Local Network with a Packet Filtering Firewall

• Introduction to Netfilter and Iptables
• Sample Firewall Script
• Python Firewall The same firewall script as above, translated into Python.

Lab 2 Modify the sample firewall script and run it on your LAN gateway and hosts to allow access to the following services on your LAN

• ssh, and
• all the ports specified in the file /etc/openports
  • the first field of each line is the port number, the second field is the transport, and the rest is description or comment
  • line starts with the # sign is a comment
• all the ports to be forwarded specified in the file /etc/fwports
  • this file should exist only on a gateway/router machine
  • line starts with the # sign is a comment
  • the first field of each line is the port to be forwarded, the second filed is the transport, and the rest is description or comment

After testing your firewall, use the iptables-save command to save the output to a file. Name the file on the gateway as "gw-fw.txt" and name the file on the host as "host-fw.txt".

Email both files to your instructor by Feb 3, 2009.

Week 3 (January 26) - Network Authentication using NIS

Using SSH/SCP without password

Linux Firewall Book By Michael Rash

NIS Server Slides

NIS Client Slides

Lab 3

Week 4 (February 2) - DHCP and Dynamic DNS

Two guides for setting up a DHCP server in Linux:
www.linuxhomenetworking.com
www.yolinux.com

DHCP Server Configuration

Configure DHCP to perform Dynamic DNS update: Secure Dynamic DNS How To

Lab 4

Lab 4a

Week 5 (February 9) - Network Authentication Using LDAP

OpenLDAP Installation and Test

OpenLDAP Web Site

Assignment 1

Lab 5

OpenLDAP Server Installation and Test

Week 6 (February 16) - OpenLDAP Administration

• OpenLDAP administration
  • directory backup and restore
• VMware Server Console
  • Online Virtual Machine
    • Stephen Carter: zenit.senecac.on.ca:9417/nad810_091a01
    • Tak Nagi Chan: zenit.senecac.on.ca:9418/nad810_091a02
    • Patricia Constantino: zenit.senecac.on.ca:9417/nad810_091a03
    • Varinder Singh Jhand: zenit.senecac.on.ca:9418/nad810_091a04
    • Kezhong Liang: zenit.senecac.on.ca:9417/nad810_091a05
    • Katherine Ada Masseau: zenit.senecac.on.ca:9418/nad810_091a06
    • Milton Paiva Neto: zenit.senecac.on.ca:9417/nad810_091a07
    • Mohak Dilipbhai Vyas: zenit.senecac.on.ca:9418/nad810_091a08
  • Enable Internet Services
    • SMTP Service
    • Root Name Server
    • Web service
    • LDAP service

Week 7 (February 23) Fedora/Red Hat Directory Server

Red Hat Directory Server

Fedora Directory Server

Scalable Centralized Authentication Services using RHDS

Week 8 (March 9) - Midterm Test

Midterm Test on March 10, 2009

Week 9 (March 16) - Advanced IP Routing

• -Slides-
  • Policy routing
  • QoS
  • RVSP
• iproute resources
  • ip command reference (I got this on the web, but can't find the source now. Help is welcome.)

Week 10 (March 23) - Linux Terminal Server and Diskless Workstation

The basic overview of Linux Diskless Workstation [1]

Linux Terminal Server Project LTSP - Theory of Operation

More Links

John Selmys' Diskless Client Configuration

Diskless Howto on Gentoo

Linux XDMCP HOWTO

Week 11 (March 30) - IPSec and VPN

IPSec and VPN Slides

An Illustrated Guide to IPSec

FreeSWAN

OpenSWAN

Configure Linux VPN

Assignment 2

Specification

[2]Milton's Assignment #2 - Linux VPN with OpenSwan

Nes: a fantastic, awarding winning tutorial: 'VPN/IPSec for Dumpling'

Week 12 (April 6) - DNSSEC

DNS Security Extensions

• FOUR New Resource Record Types:
  • The DNSKEY Record
    • Zone-signing Key
    • Key-signing Key
  • The RRSIG Record - store the digital signature on an RRset
  • The NSEC Record - "Next SECure" record, to indicate which domain name comes next after a given domain name
  • The DS Record - for Delegation Signer
• EDNS0 - Teh Extension Mechanisms for DNS, version 0
  • handle a DNS message larger than 512 bytes
  • DO flag - DNSSEC OK
  • AD and CD flag for DNS queries:
    • AD - Authenticated Data
    • CD - Checking Disabled
• Zone Signing
  • Use dnssec-keygen to generate KSK and ZSK pairs
    • dnssec-keygen -f KSK -a RSASHA1 -b 512 -n ZONE mydomain.com.
    • dnssec-keygen -a RSASHA1 -b 512 -n ZONE mydomain.com.
  • Use dnssec-zonesige to sign the zone file
    • dnssec-signzone -o mydomain.com. db.mydomain
    • keyset file
    • dsset file

References:

• DNS and BIND by Cricket Liu and Paul Albitz - 5th Edition
• ISC
• DNSSEC - BIND Administration Reference Manual
• Secure Domain Name System Deployment Guide - PDF file

Week 13 (April 13) - Review

• Assignment 2 Due (April 14)

• Final Quiz on April 16 (5%)
• Exam Review