*LinuxCBT Enterprise Linux 4 Edition* focuses on the RedHat* Enterprise 4 GNU/Linux* operating system. It is the successor to *LinuxCBT Classic Edition*.
*Workstation Focus - Module 1*
* *Installations and Usage on Dell Poweredge Hardware*
o Discuss *features* of RedHat« Enterprise Linux 4
o Prepare images for *network installation*
o Install RedHat Enterprise 4 Workstation on Dell Power Edge Server
o Explore GNOME graphical environment
o Introduction to Bourne Again Shell (*BASH*) - Globes/environment
o Input (STDIN), output (STDOUT) and standard error (STDERR) redirection
o Pipes
o Command chaining
o BASH for loops
* *Common BASH Shell commands - Command Line Interface (CLI)*
o pwd, touch, stat, ls - explore useful Linux system commands
o echo, cat - expose ASCII text and integrate with files
o cp - copy files
o mv - move files throughout the file system
o tar - explore features and advantages of *tarballs*
o gzip, bzip2 - intetgrate with tar and examine Internet archive
o diff - compare and contrast between 2 or 3 files - diff3
o file - discuss logic used to ascertain file type
o find - single and multiple expressions and criteria
o slocate - Compare and contrast with find and create system-wide DB
o w, wall, watch, whereis, which, who - Important w commands
o ps & pstree- explore process lists
o free & top - explore process management with top
o seq, top, jobs, fg, kill, killall, bg - Manage processes using standard tools
o Use *grep* to process lines
o Use *awk* to process fields - 30
* *Common Network Clients & Utilities*
o nano editor
o Convert Unix text files to Windows format using unix2dos
o Convert Windows text files to Unix format using dos2unix
o Retrieve local and remote mail with mutt Mail User Agent(*MUA*)
o mount - Mount CDs and ISO images - create ISOs with *mkisofs*
o FTP - explore the standard File Transfer Protocol (FTP) client
o gFTP - Usge GNOME FTP to interact with remote FTP server
o LFTP - basic usage, job control
o LFTP - mirror and reverse mirror content - resume transmission
o LFTP - batch, non-interactive, scripted mode
o Introduction to SSH concepts, implementation, etc.
o Use *SSH Client *to connect to remote Linux Systems using password authentication
o Identify key SSH-client files (.*known_hosts*, public/private key pairs,etc.)
o Authenticate to remote Linux systems using alternate credentials
o Use *Secure Copy Protocol* (*SCP*) to move data between systems *non-interactively*
o Use *Secure File Transfer Protocol* (*SFTP*) to move data between systems *interactively*
o Demonstrate how to generate Public/Private key (RSA/DSA) pairs using *SSH-Keygen*
o Demonstrate using SSH to authenticate to remote Linux hosts without passwords
o Install RedHat Enterprise Workstation on Dell Laptop using HTTP
o Generate *Public* Key/*Private* Key pairs for use with file and E-mail encryption
o Demonstrate using E-mail client with GNU Privacy Guard (*GPG*) Open *PGP* for E-Mail encryption
o Use Remote Desktop to connect to *RDP* & *VNC* remote Linux and Windows hosts
*System Configuration - Module 2*
* *Installation on Dell Poweredge Server*
o Prepare Sources on Apache HTTP server
o Burn bootable CD with network drivers for network-based installation
o Remove hardware-based RAID 0 configuration
o Configure hardware-based RAID 5 logical storage
o Commence software installation
o Create custom partitions and mount points during installation
o Configure X11 and confirm installation
* *System Initialization*
o Explore GRUB
o Explore system recovery mode
o Explore INIT
* *System V Linux Runlevel implementation*
o Identify key startup files, including scripts (inittab,Sscripts,Kscripts,etc.)
o Explain GNU/Linux System V Init Runlevel (0 - 6) concepts & applications
o chkconfig & ntsysv
o Identify startup log files & entries using DMESG & exploration
* *Manage Users and Groups & Permissions*
o *User* and *group* creation & management concepts - passwd, shadow, group, gshadow files
o Use system-config-users to create and manage users and groups
o chmod/chown/chgrp
o SETGID - Group collaboration
o Explore *Hard* and *Symbolic* *links* including across disparate file systems
* *File System Management*
o FDISK
o Create Standard Linux Partition
o Make EXT2 File System & mount for general usage
o Use *tune2fs* to upgrade EXT2 to EXT3 File System
o Remove EXT2 partition and create EXT3-based parition
o FSTAB - explore File System Table
o Use FDISK to create a swap partition
o Create Swap partition using MKSWAP & SWAPON
o Provision *additional swap space* using swapon & swapoff
o Explore GNU *Parted* as a partition and file-system management tool
o Use Parted to create EXT?-based and Swap partitions
o *Logical Volume Management* (*LVM*) - Discuss concepts and applications
o Allocate partitions for usage with LVM
o Create Physical Volumes
o Create Volume Groups based on Physical Volumes
o Create Logical Volumes based on Volume Groups
o Prepare EXT3-based file systems on LVM-managed storage
o Mount and use LVM Volumes
o Resize LVM Volumes
* *Kickstart-based RAID Installation*
o Use Kickstart tool to configure automated kickstart process
o Installation via *HTTP* using *Kickstart*
o Discuss RAID concepts and configuration
o Configure RAID disk partitions
* *RPM Package Management Tool *Concepts & Usage
o *Query* existing packages & file-based packages
o Identify offline and online package repositories
o *Install* packages
o *Upgrade* packages
o *Freshen *packages
o *Remove* packages
* *Kernel Concepts and Management*
o Identify and discuss kernel implementation
o Use kernel utils to identify modules and supported hardware
o Discuss proper kernel update procedures
o Download and Install the latest SMP-based kernel
o Confirm results
o Remove outdated kernel and confirm results
o Download and Install the latest Uniprocessor-based kernel
o Examine changes to GRUB and other key directory trees
o SYSCTL - use to view and modify run-time variables
*Core Networking Services - Module 3*
* *Network - Physical & Logical Configuration*
o Identify key directories & files for static & dynamic communications
o Configure Linux client with static TCP/IP parameters for network communication
o Explore hotplug -> hwup -> ifup logic
o Use ifconfig to ascertain logical TCP/IP configuration
o Use *hwinfo* to ascertain installed hardware
o Configure *Aliased Ethernet Interfaces* to faciliate multiple IP addresses
* Explore *System Logging* via *SYSLOG* and Logrotate
o Explore Boot log & System Log
o Explore dmesg
o Explanation of syslog facilities & levels
o Demonstrate syslog administration
o Enable SYSLOG network listener
o Demonstrate Cisco PIX Firewall to Linux SYSLOG functionality
o Explore automatic log rotation and customization via Logrotate
o Configure Logrotate to rotate & compress sample log files
* Implement *Network Time Protocol* (*NTP*) Client/Server
o Configure Network Time Protocol (*NTP*) to perform client/server time synchronization
o Synchronize SUSE Enterprise Linux *NTP* with additional Linux Stratum 2 NTP server
o Synchronize against Stratum 1 NTP servers
* *Dynamic Host Configuration Protocol (DHCP)*
o Explain DHCP Concepts & Applications
o Explore DHCP confiuration files
o Configure DHCP subnet with applicable options
o Configure DHCP Reservation based on layer-2 address
* *Domain Name System (DNS)*
o Configure BIND as a *caching-only* DNS server
o Implement Master DNS Zone
o Configure Reverse Zone for local subnet
o Implement Dynamic Domain Name System (*DDNS*) Zones (Forward/Reverse)
o Explain DHCP and DNS update integration options
o Integrate DHCP with DNS via Encypted Transaction Signatures (TSigs)
o Configure Windows 2003* Active Directory* to publish DNS Records to Linux Server
o Examine Windows 2003 SRV Records
o Configure Master/*Slave* Zones with Linux Server
o Evaluate results of BIND configuration using DIG & host
o Implement DNS *sub-domains* (Third-level domains)
* *CRON - System Scheduler*
o Explore Cron Implementation
o Explain scheduling options
o Global and scope-based Cron options
o Schedules jobs to run & examine the output
o Configure individual Crontab entries
* *Samba Implementation*
o Implement Linux & Windows Integration via Samba
o Explore Samba Configuration files
o Implement SMBFS integration with SUSE Enterprise Linux File System
o Mount Windows shares seamlessly using Samba File System (SMBFS)
o Configure FSTAB to support repetitive mounts
o Implement secure SMBFS credentials for mounting
o Install Samba Server support
o Install Samba Web-based Administration Tool (SWAT)
o Configure Samba file sharing
o Configure Samba with multiple NETBIOS aliases
o Install Active Directory (*AD*) on Windows 2003 Host
o Configure Samba-Active Directory Integration
* *Very Secure VSFTPD File Transfer Protocol (FTP) services*
o Implement anonymous FTPD
o Implement user-level FTPD access
o Implement FTPD banners
o Disable anonymous access
o Configure VSFTPD to chroot jail users into their home directories
o Implement bandwidth rate-limiting to control bandwidth usage
* *Network File System (NFS) Implementation*
o Implement NFS Server
o Export shares and discuss options
o Mount NFS exports on remote Linux Host
o Implement *AutoFS*
* *Trivial File Transfer Protocol (TFTP) Implementation*
o Install TFTP server
o Backup Cisco PIX firewall configuration using TFTP
o Update Cisco PIX firewall configuration using TFTP
*Apache - MySQL*«* - PHP (LAMP) - Disc 4*
* *Apache Web Server Implementation
o Discuss Apache server's features and concepts
o Examine Apache-RedHat HTTPD CONF hierarchy
o Examine various configuration files
o Implement Apache *Mod Alias* and ScriptAlias
o Follow SYMLINKS
o Discuss and implement the *Directory* directive
o Restrict access to content based on IPs and subnets
o Implement *user home* (*public_html*) directories for personal web-publishing
o Configure .htacess file with directives
o Configure IP-based *Virtual Hosts*
o Configure Name-based Virtual Hosts
o Implement Basic and digest *authentication* schemes
o Explore Apache *logging* semantics
o Implement Apache logging system per virtual host
o *Webalizer* Log Analysis software Implementation
o Generate web reports using Webalizer
o Perl CGI - Implementation
* *MySQL*«* Relational Database Management System*
o Install MySQL« Relational Database Management System
o Secure access to MySQL«
o Explore MySQL« *monitor* shell-based interface
o Create sample MySQL« databases
o Load external data-set from Linux
o Load external data-set from Windows
* *PHPMyAdmin - MySQL*«* Web-based Management Interface*
o Install PHPMyAdmin for web-based management of MySQL instances
o Explain & Secure access to PHPMyAdmin
o Explore PHPMyAdmin's interface
* *Postfix Message Transfer Agent (MTA)*
o Introduction to Sendmail Implementation
o Configure Postfix as default MTA
o Introduction to Postfix Message Transfer Agent (MTA)
o Explore the directives in the Postfix configuration files
o Define default values for the FQDN
o Alter myorigin and examine results
o Configure Postfix to route messages using a *Smarthost*
o Examine how Postfix delivers mail locally
o Configure *SMTP* *Relaying* in Postfix
o Use Mutt to demonstrate outbound mail handling using Postfix
o Define *SMTP Virtual domains* for hosting multiple DNS domains
o Configure Postfix with a production LinuxCBT DNS domain
o Examine Virtual domain routing with production and non-production DNS domains
* *Internet Messaging Access Protocol (IMAP) - Dovecot*
o Explain IMAP concepts and applications in comparison to POP3
o Implement IMAP services
o Connect to IMAP services from remote Windows Outlook Express client
o Implement *IMAPS*
o Generate new self-signed SSL certificate for use with IMAPS
* *Squirrel-mail Web-based Mail Interface Implementation*
o Describe required squirrel mail components for web-mail integration
o Install squirrel mail on SUSE Enterprise Linux system
o Configure Apache virtual directory for squirrel mail integration
o Configure Apache Virtual Host for squirrel mail integration
o Configure BIND DNS services for squirrel mail integration
o Explore squirrel mail's web-based interface
* *XMPP - Enterprise Instant Messenger - Jive Messenger*
o Download and Install Jive Messenger
o Configure Jive Messenger for usage
o Evaluate IM-connectivity from Linux Jabber-compliant client
o Evaluate IM-connectivity from Windows Jabber-compliant client
*Security Implementation Techniques - Module 5*
* *System Audit & Lockdown*
o Identify tools to perform system audit
o Ascertain and document current system state
o Close all superflous services
o Bind necessary services (daemons) to necessary interfaces and logical addresses
o Establish security configuration baseline
* *NMAP - Port Scanner and Vulnerability Assessment Tool*
o Obtain, and install current version of NMAP
o Identify commonly used NMAPoptions/switches/parameters
o Explain typical TCPhandshake protocol while using NMAP
o Identifiy key NMAP configuration files
o Use NMAP to perform operating system fingerprinting
o Peform subnet-wide ethical scans
o Perform default TCPSYN-based ethical scans of local and remote resources
o Examine the results of scans on remote Cisco firewall with debugging mode enabled
o Perform default TCPConnect-based ethical scans of local and remote resources
o Examine the results of scans on remote Cisco PIXFirewall with debugging mode enabled
o Use NMAPto scan using aliased and spoofed IP addresses
o Peform local ethical scans
o Explore *NMAP* Front-End Graphical User Interface (*GUI*)
o Discuss NMAP's features and applications
o Perform Connect/Syn/Fin and various ethical port-scans
o Perform service exposure scans
* *XINETD* (Enhanced & Secure INETD Super Server Implementation)
o Identify key *XINETD* configuration files
o Explain the contents and structure of xinetd.conf
o Restrict access to various daemons/services based on hosts & subnets
o Lockdown XINETD-controlled services
o Configure XINETD to restrict number of spawned instances of daemons/services
o Configure XINETD to bind daemons/services to specific sub-interfaces (Virtual IP addresses)
o XINETD logging
o Explore additional XINETD features
* *TCP Wrappers* concepts & applications
o Identify primary package and key TCP Wrappers configuration files
o Demonstrate disabled TCP Wrappers configurations by attempting connectivity
o Examine pre and post TCP Wrappers configuration effects
o Implement TCP Wrappers for common services
o Test local & remote access to TCP Wrappers-protected host & services
* *IPTABLES* (Netfilter Linux Kernel-based Firewall)
o Discuss IPTABLES/Netfilter Concepts
o Explore *default* tables and chains
o Define and test *INPUT* chains
o Define and test *OUTPUT* chains
o Create *user-defined chain* and evaluate results
o Explain IPTABLES default *chains*/filters and policies
o Examine TCP/ICMP communications pre-IPTABLES chains
o Implement ICMP inbound filtration based on various hosts
o Use Cisco PIX Firewall to verify ICMP debugging
o Filter traffic based on *Layer-4 TCP/UDP* (Source/Destination Ports) information
o Restrict access to various daemons (SSH/FTP/HTTP/etc.)
o Test connectivity locally and remotely (RedHat/Windows/etc.)
o Implement *IP Forwarding* between disparate subnets
o Implement Network Address Translation (*NAT*)
* *Nessus Vulnerability Scanner*
o Download and Install Nessus Vulnerability Scanner
o Install missing system dependencies
o Generate self-signed SSL certificates
o Perform basic Nessus system configuration and start the daemon
o Use Nessus Linux client to connect to Nessus Server and perform scans
o Examine resuls of scanning Windows 2003 Host
o Examine resuls of scanning Cisco PIX Firewall Appliance
* *Secure Shell Daemon - Secure Communications Implementation*
o Explore SSHD key configuration files
o Restrict access to SSHD
o Explore SSHD logging
o Configure *PVPNs* with *local port forwarding*
o Configure PVPNs with *remote port forwarding*
o Execute remote commands in non-interactive mode using SSH
o Discuss* forced-commands framework*
o Configure SUSE Enterprise to accomodate forced-commands
o Test forced-commands for pre-configured accounts for push/pull secure transactions
o Integrate SSHD with Windows 2003 Server and PuTTY SSH client
o Implement PKI with PuTTY SSH
o Use PSCP and PSFTP to *communicate securely* from Windows« 2003 to SUSE« Linux
* *Snort*«* 2.x Network Intrusion Detection System* (*NIDS*)
o Obtain, and install pre-requisites (libpcap/libpcre/etc.)
o Obtain, compile and install the *Snort*« Network Intrusion Detection System (*NIDS*)
o Identify and explain key operating modes (*Sniffer/Logger/NIDS*)
o Explore in network sniffer mode
o Explain OSI Model and relevant sniffing options
o Explore Snort« in ASCII and Binary (TCPDUMP) logging modes
o Output logs to *ASCII* text format and examine the results
o Output logs to *binary* format and examine the results
o Implement Snort« with *BPF* to *filter* traffic
o Generate traffic from remote Windows 2003 and Linux hosts
o Use Snort« with *Berkeley Packet Filter* (BPF) to parse logs
o Implement Snort« in NIDS modes
o Explore the snort.conf file and discuss rules
o Explain Logging and Alerting output options
o Perform port-scans from remote Linux systems and analyze Alerts
o Configure Snort« to log to *SYSLOG*
Disc: 1DVDKodi:http://rapidshare.de/files/17837132/KELCYRA4EVER.sfv.html http://rapidshare.de/files/17895032/KELCYRA4EVER.zip.html http://rapidshare.de/files/17843701/KELCYRA4EVER.z01.html http://rapidshare.de/files/17848052/KELCYRA4EVER.z02.html http://rapidshare.de/files/17852123/KELCYRA4EVER.z03.html http://rapidshare.de/files/17855863/KELCYRA4EVER.z04.html http://rapidshare.de/files/17859080/KELCYRA4EVER.z05.html http://rapidshare.de/files/17861786/KELCYRA4EVER.z06.html http://rapidshare.de/files/17864160/KELCYRA4EVER.z07.html http://rapidshare.de/files/17866446/KELCYRA4EVER.z08.html http://rapidshare.de/files/17868637/KELCYRA4EVER.z09.html http://rapidshare.de/files/17870708/KELCYRA4EVER.z10.html http://rapidshare.de/files/17873527/KELCYRA4EVER.z11.html http://rapidshare.de/files/17875206/KELCYRA4EVER.z12.html http://rapidshare.de/files/17877303/KELCYRA4EVER.z13.html http://rapidshare.de/files/17879432/KELCYRA4EVER.z14.html http://rapidshare.de/files/17881942/KELCYRA4EVER.z15.html http://rapidshare.de/files/17885383/KELCYRA4EVER.z16.html http://rapidshare.de/files/17889101/KELCYRA4EVER.z17.html http://rapidshare.de/files/17898792/KELCYRA4EVER.z18.html http://rapidshare.de/files/17902836/KELCYRA4EVER.z19.html http://rapidshare.de/files/17907119/KELCYRA4EVER.z20.html http://rapidshare.de/files/17912070/KELCYRA4EVER.z21.html http://rapidshare.de/files/17916621/KELCYRA4EVER.z22.html http://rapidshare.de/files/17920924/KELCYRA4EVER.z23.html http://rapidshare.de/files/17925406/KELCYRA4EVER.z24.html http://rapidshare.de/files/17929850/KELCYRA4EVER.z25.html http://rapidshare.de/files/17935155/KELCYRA4EVER.z26.html http://rapidshare.de/files/17939628/KELCYRA4EVER.z27.html http://rapidshare.de/files/17943467/KELCYRA4EVER.z28.html http://rapidshare.de/files/17946489/KELCYRA4EVER.z29.html http://rapidshare.de/files/17949886/KELCYRA4EVER.z30.html http://rapidshare.de/files/17953185/KELCYRA4EVER.z31.html http://rapidshare.de/files/17956207/KELCYRA4EVER.z32.html http://rapidshare.de/files/17958524/KELCYRA4EVER.z33.html http://rapidshare.de/files/17961647/KELCYRA4EVER.z34.html http://rapidshare.de/files/17964951/KELCYRA4EVER.z35.html http://rapidshare.de/files/17968205/KELCYRA4EVER.z36.html http://rapidshare.de/files/17971162/KELCYRA4EVER.z37.html http://rapidshare.de/files/17974703/KELCYRA4EVER.z38.html http://rapidshare.de/files/17978998/KELCYRA4EVER.z39.html http://rapidshare.de/files/17983277/KELCYRA4EVER.z40.html http://rapidshare.de/files/17987562/KELCYRA4EVER.z41.html http://rapidshare.de/files/17992138/KELCYRA4EVER.z42.html http://rapidshare.de/files/17996800/KELCYRA4EVER.z43.html http://rapidshare.de/files/18001876/KELCYRA4EVER.z44.html http://rapidshare.de/files/18006684/KELCYRA4EVER.z45.html http://rapidshare.de/files/18011532/KELCYRA4EVER.z46.html http://rapidshare.de/files/18016029/KELCYRA4EVER.z47.html http://rapidshare.de/files/18020667/KELCYRA4EVER.z48.html http://rapidshare.de/files/18025037/KELCYRA4EVER.z49.html http://rapidshare.de/files/18028267/KELCYRA4EVER.z50.html http://rapidshare.de/files/18031268/KELCYRA4EVER.z51.html http://rapidshare.de/files/18033839/KELCYRA4EVER.z52.html http://rapidshare.de/files/18036135/KELCYRA4EVER.z53.html http://rapidshare.de/files/18038280/KELCYRA4EVER.z54.html http://rapidshare.de/files/18040197/KELCYRA4EVER.z55.html http://rapidshare.de/files/18041917/KELCYRA4EVER.z56.html http://rapidshare.de/files/18045528/KELCYRA4EVER.z57.html http://rapidshare.de/files/18047920/KELCYRA4EVER.z58.html http://rapidshare.de/files/18050679/KELCYRA4EVER.z59.html http://rapidshare.de/files/18053862/KELCYRA4EVER.z60.html http://rapidshare.de/files/18057116/KELCYRA4EVER.z61.html http://rapidshare.de/files/18060662/KELCYRA4EVER.z62.html
Size: 3.05GB
Parts: 63 ( 62x50MB 1x25MB )
Krijoni Kontakt