Linux Networking Cookbook

Gregory Boyce

• Publisher: Packt Publishing
• Year: 2016
• Edition: 1
• eBook ISBN:
  9781785287916
• Topic: Computer Science
• Subtopic: Cyber Security
• Index: Computer Science

Over 40 recipes to help you set up and configure Linux networks

About This Book

• Move beyond the basics of how a Linux machine works and gain a better understanding of Linux networks and their configuration
• Impress your peers by setting up and configuring a Linux server and its various network elements like a pro
• This is a hands-on solution guide to building, maintaining, and securing a network using Linux

Who This Book Is For

This book is targeted at Linux systems administrators who have a good basic understanding and some prior experience of how a Linux machine operates, but want to better understand how various network services function, how to set them up, and how to secure them. You should be familiar with how to set up a Linux server and how to install additional software on them.

What You Will Learn

• Route an IPv6 netblock to your local network
• Modify your named instance to support setting hostnames for your IPv6 addresses
• Use SSH for remote console access
• Configure NGINX with TLS
• Secure XMPP with TLS
• Leverage iptables6 to firewall your IPv6 traffic
• Configure Samba as an Active Directory compatible directory service

In Detail

Linux can be configured as a networked workstation, a DNS server, a mail server, a firewall, a gateway router, and many other things. These are all part of administration tasks, hence network administration is one of the main tasks of Linux system administration. By knowing how to configure system network interfaces in a reliable and optimal manner, Linux administrators can deploy and configure several network services including file, web, mail, and servers while working in large enterprise environments.

Starting with a simple Linux router that passes traffic between two private networks, you will see how to enable NAT on the router in order to allow Internet access from the network, and will also enable DHCP on the network to ease configuration of client systems. You will then move on to configuring your own DNS server on your local network using bind9 and tying it into your DHCP server to allow automatic configuration of local hostnames. You will then future enable your network by setting up IPv6 via tunnel providers.

Moving on, we'll configure Samba to centralize authentication for your network services; we will also configure Linux client to leverage it for authentication, and set up a RADIUS server that uses the directory server for authentication.

Toward the end, you will have a network with a number of services running on it, and will implement monitoring in order to detect problems as they occur.

Style and approach

This book is packed with practical recipes and a task-based approach that will walk you through building, maintaining, and securing a computer network using Linux.

Linux Networking Cookbook

---

Table of Contents

Linux Networking Cookbook

Credits

About the Author

About the Reviewer

www.PacktPub.com

eBooks, discount offers, and more

Why Subscribe?

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Configuring a Router

Introduction

Setting up the physical network

How to do it…

How it works…

Configuring IPv4

How to do it…

How it works…

Configuring IPv4 permanently

How to do it…

How it works…

Connecting two networks

How to do it…

How it works…

Enabling NAT to the outside

How to do it…

How it works…

Setting up DHCP

How to do it…

How it works…

Setting up a firewall with IPtables

How to do it…

How it works…

Setting up port forwarding

How to do it…

How it works…

Adding VLAN Tagging

How to do it...

How it works...

2. Configuring DNS

Introduction

Setting up your system to talk to a nameserver

How to do it…

How it works…

Setting up a local recursive resolver

How to do it…

How it works…

There's more…

Configuring dynamic DNS on your local network

How to do it…

How it works…

Setting up a nameserver for your public domain

How to do it...

How it works…

Setting up a slave nameserver

How to do it…

How it works…

3. Configuring IPv6

Introduction

Setting up an IPv6 tunnel via Hurricane Electric

How to do it…

How it works…

Using ip6tables to firewall your IPv6 traffic

How to do it…

How it works…

Route an IPv6 netblock to your local network

How to do it...

How it works…

4. Remote Access

Introduction

Installing OpenSSH

How to do it…

How it works…

Using OpenSSH as a basic shell client

How to do it…

How it works…

Using OpenSSH to forward defined ports

How to do it…

How it works…

Using OpenSSH as a SOCKS proxy

How to do it…

How it works…

Using OpenVPN

How to do it…

How it works...

5. Web Servers

Introduction

Configuring Apache with TLS

How to do it…

How it works…

Improving scaling with the Worker MPM

How to do it…

How it works…

Setting up PHP using an Apache module

How to do it…

How it works…

Securing your web applications using mod_security

How to do it…

How it works…

Configuring NGINX with TLS

How to do it…

How it works...

Setting up PHP in NGINX with FastCGI

How to do it…

How it works…

6. Directory Services

Introduction

Configuring Samba as an Active Directory compatible directory service

How to do it…

How it works…

Active Directory requirements

Selecting a realm and domain name

Using Samba-tool

Bind configuration

Joining a Linux box to the domain

How to do it…

How it works…

7. Setting up File Storage

Introduction

Serving files with SMB/CIFS through Samba

How to do it…

How it works…

Granting authenticated access

How to do it…

How it works…

Setting up an NFS server

How to do it…

How it works…

There's more…

Configuring WebDAV through Apache

How to do it…

How it works…

Apache modules

Directory directive

Authnz_external configuration

Directory definition

Authentication/Authorization:

Basic Apache directory configuration:

Enable WebDAV:

Granting write access

8. Setting up E-mail

Introduction

Configuring Postfix to send and receive e-mail

How to do it…

How it works…

There's more…

Setting up aliases

Setting up a smarthost

Relays without authentication

Relays with Auth

Setting up DNS records for e-mail delivery

How to do it…

How it works…

Configuring IMAP

How to do it...

How it works…

Configuring authentication for outbound e-mail

How to do it…

How it works…

Configuring Postfix to support TLS

How to do it…

How it works…

Blocking spam with Greylisting

How to do it…

How it works…

Filtering spam with SpamAssassin

How to do it…

How it works…

9. Configuring XMPP

Introduction

Installing ejabberd

How to do it...

How it works…

Configuring authentication

Configuring listening ports

C2S service

S2S service

HTTP Service

Access control

Modules

mod_muc

mod_roster

mod_announce

Configuring DNS for XMPP

How to do it…

How it works…

Configuring the Pidgin client

How to do it…

Install pidgin

Configuring your account

How it works…

10. Monitoring Your Network

Introduction

Installing Nagios

How to do it…

How it works…

Adding Nagios users

How to do it…

How it works…

Adding Nagios hosts

How to do it…

How it works…

Monitoring services

How to do it…

How it works…

Defining commands

How to do it…

How it works…

Monitoring via NRPE

How to do it…

How it works…

On the target

On the Nagios host

Monitoring via SNMP

How to do it...

How it works…

11. Mapping Your Network

Introduction

Detecting systems on your network with NMAP

How to do it…

How it works…

Detecting Systems Using Arp-Scan

How to do it…

How it works…

Scanning TCP ports

How to do it…

TCP CONNECT scan

TCP SYN scan

How it works…

Scanning UDP ports

How to do it…

How it works…

Identifying services

How to do it…

How it works…

Identifying operating systems

How to do it...

How it works…

12. Watching Your Network

Introduction

Setting up centralized logging

Input methods

Output methods

How to do it…

How it works…

Installing a Snort IDS

How to do it…

How it works…

WAN Interface

LAN interface

Dedicated interface

Managing your Snort rules

How to do it...

How it works…

Managing Snort logging

How to do it...

How it works…

Ubuntu stock

Enable fast logging

Enabling Tcpdump logging

Other logging options

Index

Linux Networking Cookbook

Copyright © 2016 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except i...

Table of contents

• Linux Networking Cookbook