OPS535 A2 201603

Due Dates

• This assignment worth 15% of your final grade.
• Due Date: March 29th, 2019
• Important: You must be in the Lab on March 29th, 2019 to present your systems in order to have your assignment marked unless it is for medical reason.

Specification

Basic Services

Setup an Internet email system for your assigned DNS Domain using the Virtual Machines in your Virtual Network. Your Internet email system must provide the following functions at the minimum:

• A SMTP email server that is capable of receiving and sending emails for users in your domain.
  • Users in your domain must be able to send emails to users in the same domain and users in other students' domain in the class.
  • Users in your domain must be able to receive emails from other email users (both in your domain or from other domains).
• An IMAP Access Agent allowing users in your domain to remotely access their mail.
  • Users in your domain must be able to access/manage their mail box using IMAP(s) clients or a web browser.
• You email server must be configured to check the SPF (sender policy framework) of other domains for incoming email and reject email that are violating the sender policy.
• Configure your DNS server to implement and provide the SPF protection for your domain.
• Configure your DNS server to implement and provide the DNSSEC records for your domain.
  • Provide the administrator for the .ops domain (your professor) with a copy of the DS key for your domain.

Supporting Services

You need the following services and network infrastructure to support your Internet Email System (some of which should have been configured in assignment 1):

• A primary DNS name server for your domain with the proper MX record(s), SPF record(s), A record(s), and PTR record(s).
  • Update your DNS server info on the wiki site as well. URL of the wiki site: http://zenit.senecac.on.ca/wiki/index.php/Domainreg . If you have trouble editing the wiki page, please send an email to your professor.
  • Provide the administrator of the .ops domain (your professor) with either glue records or a stub zone definition.
• Proper static network routes to and from other Email servers in the Lab.

BONUS

1. Optional: Use LDAP authentication to secure your web mail server or Access Agent. (Bonus item +10%)
2. Optional: Configure a DNSSEC Trust Anchor so that your co-nfs server considers the .ops server to already be authenticated. I will provide the key necessary for this through blackboard. (Bonus item +10%)
3. Optional: Enable postfix restrictions to reject malformed or suspicious incoming mail (Bonus item - up to +10% depending on quality of configuration)

Evaluation

Script

On the due date you will be tasked to:

1. Add two new email users to your domain. Name of the new users will be given in class.
2. send an email by one of the new email users to the other new email user in your own domain.
3. send an email by one of the new email users to a designated user of other domain.
4. receive the reply email from the designated user of the other domain.
5. query a record from another domain
6. query a record from another domain with dnssec information included.

I will post a script to blackboard that will capture your configuration and logs. You will run this script on your machines and upload the output to blackboard.

If you have any questions or need any clarification, please email your instructor at least one week before the posted due date.