Changes

*** Gregory John Katherine Ada Masseau: zenit.senecac.on.ca:9418/nad810_091a06

= Week 9 (March 16) - Advanced IP Routing=* [https://cs.senecac.on.ca/~rchan/nad810/0901/notes/AdvRouting.pdf -Slides-]** Policy routing** QoS** RVSP* iproute resources** [https://cs.senecac.on.ca/~rchan/nad810/0901/notes/ip-cref.pdf ip command reference ] (I got this on the web, but can't find the source now. Help is welcome.) = Week 10 (March 23) - Linux Terminal Server and Diskless Workstation = The basic overview of Linux Diskless Workstation [https://cs.senecac.on.ca/~rchan/nad810/0701/notes/diskless/siframes.html] [http://ltsp.mirrors.tds.net/pub/ltsp/docs/ltsp-4.1-en.html#AEN53 Linux Terminal Server Project LTSP - Theory of Operation] == More Links == [https://cs.senecac.on.ca/~selmys/diskless.html John Selmys' Diskless Client Configuration]  [http://www.gentoo.org/doc/en/diskless-howto.xml Diskless Howto on Gentoo] [http://tldp.org/HOWTO/XDMCP-HOWTO/index.html Linux XDMCP HOWTO] = Week 11 (March 30) - IPSec and VPN = [https://cs.senecac.on.ca/~rchan/nad810/0901/IPSec-VPN.pdf IPSec and VPN Slides] [http://unixwiz.net/techtips/iguide-ipsec.html An Illustrated Guide to IPSec] [http://www.freeswan.org FreeSWAN] [http://www.openswan.org OpenSWAN] [http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch35_:_Configuring_Linux_VPNs Configure Linux VPN]   ==Assignment 2==[[NAD810 A2|Specification]] [http://zenit.senecac.on.ca/wiki/index.php/Milton-vpn-openswan]Milton's Assignment #2 - Linux VPN with OpenSwan '' '''[http://zenit.senecac.on.ca/wiki/index.php/Talk:Winter_2009_NAD810_Weekly_Schedule Nes: a fantastic, awarding winning tutorial: 'VPN/IPSec for Dumpling']''' '' = Week 12 (April 6) - DNSSEC =DNS Security Extensions* FOUR New Resource Record Types:** The DNSKEY Record*** Zone-signing Key*** Key-signing Key** The RRSIG Record - store the digital signature on an RRset** The NSEC Record - "Next SECure" record, to indicate which domain name comes next after a given domain name** The DS Record - for Delegation Signer* EDNS0 - Teh Extension Mechanisms for DNS, version 0** handle a DNS message larger than 512 bytes** DO flag - DNSSEC OK** AD and CD flag for DNS queries:*** AD - Authenticated Data*** CD - Checking Disabled* Zone Signing** Use dnssec-keygen to generate KSK and ZSK pairs*** dnssec-keygen -f KSK -a RSASHA1 -b 512 -n ZONE mydomain.com.*** dnssec-keygen -a RSASHA1 -b 512 -n ZONE mydomain.com.** Use dnssec-zonesige to sign the zone file*** dnssec-signzone -o mydomain.com. db.mydomain*** keyset file*** dsset file References:* DNS and BIND by Cricket Liu and Paul Albitz - 5th Edition* [http://www.isc.org ISC]* [http://ftp.isc.org/www/bind/arm95/Bv9ARM.ch04.html DNSSEC - BIND Administration Reference Manual]* [http://csrc.nist.gov/publications/nistpubs/800-81/SP800-81.pdf Secure Domain Name System Deployment Guide - PDF file] = Week 13 (April 13) - Review =* Assignment 2 Due (April 14) * Final Quiz on April 16 (5%)* Exam Review