Franske CNT-2311 Labs - Revision history

BenFranske: /* Samba */

2011-04-28T05:14:41Z

Samba

← Older revision		Revision as of 05:14, 28 April 2011
Line 276:		Line 276:

	=Samba=		=Samba=
			# Start your Ubuntu Server VM
			# Install the Samba Server on your system and re-scan installed programs with Webmin so that it can be configured there
			# Modify your firewall settings to allow access to your Samba server from your host system (which exists on the campus subnet). Keep in mind the network settings and multiple network cards in your VM as well as what they are attached to. You will need to research what ports are needed for SMB/CIFS fileservers online.
			# Set the workgroup for your server to be the CNTLINUX workgroup
			# Set the name of your Samba server to your name (without spaces)
			# Configure sharing of user home directories and allow users to write to them as well as read from them
			# Verify that you can access the home directory of a user on your Ubuntu server system from a Windows computer, either a Windows VM or your host computer. Try creating a new file and moving an existing file as well.
			# Setup a new directory on your Ubuntu server which can be used by multiple users and add it as a new Samba share.
			# Verify you can access and use the new share with multiple user accounts. Because Windows caches your credentials you may need to ask your neighbor to try logging into your Samba server from their computer as a different user.

BenFranske at 05:02, 28 April 2011

2011-04-28T05:02:03Z

← Older revision		Revision as of 05:02, 28 April 2011
Line 274:		Line 274:
	## Verify DNS service is working from a client system		## Verify DNS service is working from a client system
	## If you have time, as a challenge, try to create a DNS zone for example.com with at least one A record for example.com and try looking up the IP address from one of your client systems.		## If you have time, as a challenge, try to create a DNS zone for example.com with at least one A record for example.com and try looking up the IP address from one of your client systems.

			=Samba=

BenFranske: /* Firewalls, DHCP and DNS */

2011-04-21T15:36:15Z

Firewalls, DHCP and DNS

← Older revision		Revision as of 15:36, 21 April 2011
Line 257:		Line 257:

	=Firewalls, DHCP and DNS=		=Firewalls, DHCP and DNS=
			# Start VirtualBox and modify the network settings of your VMs
			## Your Ubuntu Server system should have two network cards. The first bridged to the outside network adapter and the second connected to an internal network.
			## Your Ubuntu Desktop and Fedora systems should both have their network cards attached to the same internal network as the server.
			## Start your Ubuntu Server VM
			# Install the ISC DHCP Server version 3 on your system
			## Configure a private static IP address on the second network card attached to the internal network.
			## Configure the DHCP server either directly or through Webmin to hand out addresses from one of the private IP address ranges to clients on the internal network adapter. You should also provide the address of your internal network interface as the default gateway and DNS server.
			## Start one of the client systems and verify the correct network configuration is being received.
			# Using either Webmin or the command line configure the system firewall as a masquerading NAT setup to allow clients on the internal network to reach outside sites and secure your system from unwanted outside packets.
			## The main NAT rule must exist in the postrouting chain of the NAT table and should take the action of masquerading all traffic leaving the outside interface of the system.
			## Don't forget to enable IP forwarding (routing) in your kernel settings!
			## Securing your system would also include limiting all inbound traffic from the outside interface to the local system and traffic being routed to other systems to traffic which has been requested (established, related)
			## You should be sure to continue to allow access to your Webmin interface as well!
			## Verify your firewall is working properly by attempting to ping an Internet IP address such as 8.8.8.8 from one of the client systems.
			# Install the BIND DNS server to provide caching DNS service to internal clients
			## Verify DNS service is working from a client system
			## If you have time, as a challenge, try to create a DNS zone for example.com with at least one A record for example.com and try looking up the IP address from one of your client systems.

BenFranske: add firewalls lab section

2011-04-21T15:15:15Z

add firewalls lab section

← Older revision		Revision as of 15:15, 21 April 2011
Line 255:		Line 255:
	## Download and install (following instructions included in the download) the [http://www.wordpress.org WordPress] or [http://www.mybb.com MyBB] software on your webserver. Note that this will involve creating a MySQL database which you can either do though the command line or through the Webmin MySQL module.		## Download and install (following instructions included in the download) the [http://www.wordpress.org WordPress] or [http://www.mybb.com MyBB] software on your webserver. Note that this will involve creating a MySQL database which you can either do though the command line or through the Webmin MySQL module.
	## Make sure that you can access and use your web application through a browser on your host system accessing http://your-ubuntu-server-ip-address		## Make sure that you can access and use your web application through a browser on your host system accessing http://your-ubuntu-server-ip-address

			=Firewalls, DHCP and DNS=

BenFranske: /* Webmin and Apache */

2011-04-14T17:00:23Z

Webmin and Apache

← Older revision		Revision as of 17:00, 14 April 2011
Line 235:		Line 235:

	=Webmin and Apache=		=Webmin and Apache=
	#~~Install~~ the links and lynx text-mode web browsers on your ~~Ubuntu Server System~~		# Start your Ubuntu Server system
	#~~#Install these packages~~ on your ~~Ubuntu Server system~~		# If you have not yet installed the '''links''' and '''lynx''' text-mode web browsers on your system do so now
	##*links lynx		# Start the links web browser, press "G" to GO to a URL, and browse around on the Internet until SafeConnect asks for a username and password. Authenticate with SafeConnect using your campus username and password. If you have problems with SafeConnect working with links try using lynx instead.
	#Install ~~Webmin~~ on ~~your Ubuntu Server System~~		# Install the Apache 2 webserver as well as the '''mysql-server php5 php5-mysql''' packages which will be used later on.
	##~~Download~~ the ~~Webmin DEB package~~ from ~~http://www.webmin.com~~		## Check the IP address of your server and then try visiting that IP address from the web browser of your host system to make sure that the Apache software has been installed
	##~~Install~~ the ~~following packages~~ on your ~~Ubuntu Server (command line only) system through one of the APT utilities:~~		## Try finding and editing the index.html page which is being served by your server and verify that you can see the changes by refreshing the page in the web browser on your host
	##*perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl apt-show-versions libapt-pkg-perl		## Create a new directory inside your home directory to hold website files.
	##~~Install the Webmin DEB package you downloaded with the dpkg utility~~		## Create a new index.html file inside of that directory
	##~~Check~~ the ~~IP address~~ of ~~your system~~		## Find and edit the configuration file for this "default site" on Apache to use that new directory as the root of the website
	##~~Using a~~ web browser ~~on your HOST (i~~.~~e. Windows) system visit https://your-ubuntu-server-ip-address:10000~~		## Apply the changes to your configuration files and verify the new page is showing up in your web browser.
	#~~#Login~~ to the ~~Webmin interface with~~ the ~~username "root" and your system root password~~		# Return to your home directory and use the links web browser to download the webmin Debian package from webmin.com
	#Install ~~Apache 2, PHP5 and MySQL~~ on your Ubuntu Server System		# Install Webmin on your Ubuntu Server System
	##~~Install these packages on~~ your ~~Ubuntu Server~~ system		## Attempt to install the Webmin package to your system, note the names of the missing dependencies
	##*apache2 mysql-server php5 php5-mysql		## Install the dependencies and then complete the installation of the Webmin program
	##Login to the Webmin interface and ~~"Refresh Modules"~~ to ~~get~~ the Apache ~~Webserver~~ and MySQL ~~server~~ to ~~show up in~~ Webmin		## Login to the Webmin interface from the web browser of your host system, remember to use SSL and the correct port number
	#Install a WordPress blog or a MyBB bulletin board		## Change the port Webmin is operating on to 1142
	##Download and install (following instructions included in the download) the [http://www.wordpress.org WordPress] or [http://www.mybb.com MyBB] software on your webserver. Note that this will involve creating a MySQL database.		## Explore the Webmin interface including the Apache and MySQL modules. If the modules are not showing up you may have installed Apache or MySQL after Webmin. If you do this you can click the "Refresh Modules" link to search your system for software which can be configured with Webmin.
	##Make sure that you can access and use your web application through a browser on your host system accessing http://your-ubuntu-server-ip-address		# Install a WordPress blog or a MyBB bulletin board
			## Download and install (following instructions included in the download) the [http://www.wordpress.org WordPress] or [http://www.mybb.com MyBB] software on your webserver. Note that this will involve creating a MySQL database which you can either do though the command line or through the Webmin MySQL module.
			## Make sure that you can access and use your web application through a browser on your host system accessing http://your-ubuntu-server-ip-address

BenFranske: /* Chapter 10 */

2011-04-07T15:33:23Z

Chapter 10

← Older revision		Revision as of 15:33, 7 April 2011
Line 218:		Line 218:

	=Chapter 10=		=Chapter 10=
	#Install the ~~xinetd super~~ server ~~and explore~~ the configuration ~~files~~		# Start your Ubuntu Server VM
	#~~Use~~ the ~~netstat~~ and ~~lsof commands~~ to ~~check open ports~~ on your ~~system~~		# Network Service Security
	#Install the nmap scanner and try running a scan on your own system (127.0.0.1)		## Check your system for open ports using at least two different utilities which show you the name of the program with the open port
	#~~Setup~~ the sudo program to allow ~~limited access~~ to run ~~commands~~ as root ~~for various users on your system and try~~ this ~~out~~		## Install the '''telnetd''' server on your system, notice that the inetd superserver is installed automatically along with it
	#~~Search your~~ system ~~for all SUID/SGID files~~		## Check your system for open ports again, is the telnet port now listed? What program is listening to it?
	#Install the SSH server on your ~~systems~~ and try SSHing from ~~one~~ system to ~~another~~		## Examine the inetd configuration. Is TCP wrappers being used for telnet?
	#Try copying files ~~between systems with SCP~~		## Try accessing your server using telnet (with the TerraTerm program) from your host computer
	#Try to ~~setup~~ SSH ~~to use authorized_keys instead of passwords for one of~~ your ~~users~~		## Adjust the TCP Wrappers settings to deny access to telnet from the IP address of your host and try telnetting to your server again.
	#Install GPG and create a key for your user		## Install xinetd and try to create a new configuration file for it which will allow your host to telnet. Verify you are able to telnet to the server and then modify the configuration to block your host computer from accessing telnet on your server, verify this.
	~~#Try encrypting~~ and ~~decrypting~~ a text file ~~using GPG~~		## Install the nmap scanner and try running a scan on your own system (127.0.0.1)
			# Create a new user account on your system and adjust the sudo program to allow that user to run any command as root, verify that you are able to do this with the new account.
			# Obviously using telnet to administer a system remotely is a bad ideas because it transmits in the clear. Install the SSH server on your Ubuntu server system and try SSHing from your Fedora system to the Ubuntu system. Also try SSHing from your host computer to your Ubuntu server. Although PuTTY is a very popular SSH client for Windows others, such as TerraTerm, exist as well.
			# Try copying files to and from your Ubuntu system securely from your Fedora system
			# Try to implement key based authentication for SSH between your Fedora and Ubuntu system. Google this if you need some extra help.
			# Install GPG and create a key for your user. Use this key to encrypt and decrypt a text file as well as to sign a file in both standard and cleartext mode. View the contents of the file before and after each step to verify the encryption and signing is doing what you expect.

	=Webmin and Apache=		=Webmin and Apache=
	#Install the links and lynx text-mode web browsers on your Ubuntu Server System		#Install the links and lynx text-mode web browsers on your Ubuntu Server System

BenFranske: /* Chapter 9 */

2011-03-31T19:21:33Z

Chapter 9

← Older revision		Revision as of 19:21, 31 March 2011
Line 210:		Line 210:
	## Use the dpkg utility to "reconfigure" the postfix program for local mail delivery		## Use the dpkg utility to "reconfigure" the postfix program for local mail delivery
	## Try creating some mail ''aliases'' for users, don't forget to run the program to load the new aliases		## Try creating some mail ''aliases'' for users, don't forget to run the program to load the new aliases
	## Try sending and receiving mail between user accounts (and to aliases) on your system (either leave off the @ part of the email address entirely or do user@localhost) using the '''mail''' program. You may also want to install '''~~pine~~''' and see how that can be used to send and receive mail from a text only environment as well.		## Try sending and receiving mail between user accounts (and to aliases) on your system (either leave off the @ part of the email address entirely or do user@localhost) using the '''mail''' program. You may also want to install '''alpine''' and see how that can be used to send and receive mail from a text only environment as well.
	# Install the MySQL server on your system and work through all the MySQL commands (they are found in bold) from p.458 to p.465 this will include creating a database, table, filling the table with data, changing and recalling data.		# Install the MySQL server and client (these are two separate packages) on your system and work through all the MySQL commands (they are found in bold) from p.458 to p.465 this will include creating a database, table, filling the table with data, changing and recalling data.
	# Try writing a simple script		# Try writing a simple script
	## Use a text editor on your system to write a script, the goal of the script will be to output the current hostname and IP address of a given network card on your system. the script should be run with a command something like this '''./myscript.sh eth0''' and the output after the script is run should be '''The current IP address on the __INTERFACE__ interface of __HOSTNAME__ is __IP__''' where the blanks are filled in by the correct interface, hostname and IP address. You will need to use a variety of knowledge you have learned in this course to complete this task.		## Use a text editor on your system to write a script, the goal of the script will be to output the current hostname and IP address of a given network card on your system. the script should be run with a command something like this '''./myscript.sh eth0''' and the output after the script is run should be '''The current IP address on the __INTERFACE__ interface of __HOSTNAME__ is __IP__''' where the blanks are filled in by the correct interface, hostname and IP address. You will need to use a variety of knowledge you have learned in this course to complete this task.

BenFranske: /* Chapter 9 */

2011-03-31T15:48:46Z

Chapter 9

← Older revision		Revision as of 15:48, 31 March 2011
Line 206:		Line 206:

	=Chapter 9=		=Chapter 9=
	#~~Try viewing some of the predefined environment variables~~		# Install and Configure Postfix for local mail delivery on your Ubuntu system
	~~#Try setting an environment variable of your own~~ and ~~then viewing it~~		## Make sure the Postfix package is installed on your system
	~~#Create an alias~~ for ~~a command and they try using it~~		## Use the dpkg utility to "reconfigure" the postfix program for local mail delivery
	~~#Explore the global and per-user shell configuration files~~		## Try creating some mail ''aliases'' for users, don't forget to run the program to load the new aliases
	#~~Write a basic shell script, make it executable and test it out~~		## Try sending and receiving mail between user accounts (and to aliases) on your system (either leave off the @ part of the email address entirely or do user@localhost) using the '''mail''' program. You may also want to install '''pine''' and see how that can be used to send and receive mail from a text only environment as well.
	#~~Try writing a shell script using conditionals, loops or functions and then test it out~~		# Install the MySQL server on your system and work through all the MySQL commands (they are found in bold) from p.458 to p.465 this will include creating a database, table, filling the table with data, changing and recalling data.
	~~#Setup one of~~ the ~~email server programs such as~~ Postfix on your system for local mail delivery		# Try writing a simple script
	#Try ~~sending messages between~~ users ~~of your system using~~ the ~~command line as well as a graphical client~~		## Use a text editor on your system to write a script, the goal of the script will be to output the current hostname and IP address of a given network card on your system. the script should be run with a command something like this '''./myscript.sh eth0''' and the output after the script is run should be '''The current IP address on the __INTERFACE__ interface of __HOSTNAME__ is __IP__''' where the blanks are filled in by the correct interface, hostname and IP address. You will need to use a variety of knowledge you have learned in this course to complete this task.
	#~~Create an e-mail alias which directs~~ mail to ~~one or more users~~ on your system and ~~test it out~~		## Try adding a check to your script so that an appropriate error message is generated if the user requests a network interface which is not setup or not active on the system
	#Install the MySQL server on your system and work through all the MySQL commands from p.~~456~~ to p.465		## If you want to challenge yourself try creating a script which gives a complete overview of the networking status of the system for a specific interface including the system hostname, IP, subnet mask, default gateway and DNS server.

	=Chapter 10=		=Chapter 10=
	#Install the xinetd super server and explore the configuration files		#Install the xinetd super server and explore the configuration files

BenFranske at 18:42, 24 March 2011

2011-03-24T18:42:30Z

← Older revision		Revision as of 18:42, 24 March 2011
Line 101:		Line 101:
	## Get the SystemRescueCD files onto your hard drive		## Get the SystemRescueCD files onto your hard drive
	### Login to your Ubuntu Server system and use the '''links''' or '''lynx''' web browser to download the SystemRescueCD ISO image from Sourceforge at [https://sourceforge.net/projects/systemrescuecd/files/sysresccd-x86/2.0.1/systemrescuecd-x86-2.0.1.iso/download https://sourceforge.net/projects/systemrescuecd/files/sysresccd-x86/2.0.1/systemrescuecd-x86-2.0.1.iso/download]		### Login to your Ubuntu Server system and use the '''links''' or '''lynx''' web browser to download the SystemRescueCD ISO image from Sourceforge at [https://sourceforge.net/projects/systemrescuecd/files/sysresccd-x86/2.0.1/systemrescuecd-x86-2.0.1.iso/download https://sourceforge.net/projects/systemrescuecd/files/sysresccd-x86/2.0.1/systemrescuecd-x86-2.0.1.iso/download]
	### In Linux you can mount an ISO cd image file just like you would mount a hard drive or an actual cd (in read only mode of course). In order to copy some files we need from the image file we'll need to mount the image file with the command '''mount -o loop systemrescuecd-x86-2.0.1.iso /mnt/cdrom)''' note that you may choose to mount the image to a location other than /mnt/cdrom if you would like. Remember that you will need to be root in order to mount things.		### In Linux you can mount an ISO cd image file just like you would mount a hard drive or an actual cd (in read only mode of course). In order to copy some files we need from the image file we'll need to mount the image file with the command '''mount -o loop systemrescuecd-x86-2.0.1.iso /mnt/cdrom''' note that you may choose to mount the image to a location other than /mnt/cdrom if you would like. Also note that a directory must already exist before you can mount to it, you may need to create the mount point. Remember that you will need to be root in order to mount things.
	### Create a new directory called '''sysrcd''' in the root directory for the files and copy the '''sysrcd.dat''', '''sysrcd.md5''', '''initram.igz''', '''rescuecd''', '''rescue64''', '''altker32''' and '''altker64''' files from the mounted cd image to the /sysrcd/ directory. Some of these files are in the root of the CD others may be found in other places, try checking the isolinux directory on the cd for many of them.		### Create a new directory called '''sysrcd''' in the root directory for the files and copy the '''sysrcd.dat''', '''sysrcd.md5''', '''initram.igz''', '''rescuecd''', '''rescue64''', '''altker32''' and '''altker64''' files from the mounted cd image to the /sysrcd/ directory. ''Some of these files are in the root of the CD others may be found in other places'', try checking the isolinux directory on the cd for many of them.
	### Unmount the CD image file, once you're sure the files have been copied you can safely delete the CD image file from your system.		### Unmount the CD image file, once you're sure the files have been copied you can safely delete the CD image file from your system.
	## Modify the GRUB2 bootloader to add an option to boot the SystemRescueCD environment		## Modify the GRUB2 bootloader to add an option to boot the SystemRescueCD environment
Line 186:		Line 186:
	# Log in to your Ubuntu Server VM		# Log in to your Ubuntu Server VM
	## Check the current IP address, subnet mask, default gateway and nameserver used by your system (note this will require the use of several different programs)		## Check the current IP address, subnet mask, default gateway and nameserver used by your system (note this will require the use of several different programs)
	## Determine the IP address of '''google.com''' using all three of the DNS resolution tools and see how the output differs		## Determine the IP address of '''google.com''' using all three of the DNS/hostname resolution tools (do not use ping or traceroute which are not DNS resolution tools) and see how the output differs. If you are on campus you may need to log in to safeconnect using the links or lynx web browser before you will be able to reach off campus locations.
	## Check what order of files and services are used to resolve names on your system		## Check what order of files and services are used to resolve names on your system
	## Try changing your system hostname both immediately and permanently		## Try changing your system hostname both immediately and permanently

BenFranske: /* Chapter 8 */

2011-03-24T15:56:51Z

Chapter 8

← Older revision		Revision as of 15:56, 24 March 2011
Line 184:		Line 184:

	=Chapter 8=		=Chapter 8=
	#~~Check network interface configurations with ifconfig~~		# Log in to your Ubuntu Server VM
	#~~Set~~ the system ~~hostname~~ (~~temporairly with hostname and permanently with /etc/hostname~~)		## Check the current IP address, subnet mask, default gateway and nameserver used by your system (note this will require the use of several different programs)
	#~~Resovle~~ DNS names ~~with nslookup, host~~ and ~~dig~~		## Determine the IP address of '''google.com''' using all three of the DNS resolution tools and see how the output differs
	#~~Explore~~ system ~~name resolution settings in /etc/hosts~~, /~~etc~~/~~resolv~~.~~conf and~~ /~~etc~~/~~nsswitch~~.~~conf~~		## Check what order of files and services are used to resolve names on your system
	#~~Configure~~ a ~~network interface~~ in both Ubuntu and Fedora using ~~graphical~~ and ~~text only modes for~~ DHCP ~~and for a static address~~		## Try changing your system hostname both immediately and permanently
	#~~Stop~~ and ~~start a network interface~~ to ~~apply settings~~		## Change the IP configuration of your system to have a private static IP address of 192.168.1.XX where XX is the number of your computer (check the label on the front). Don't forget to apply the changes. Use a subnet mask of 255.255.255.0 there is no default gateway needed.
	#~~Explore the~~ system ~~routing table~~		## Verify the IP address changes took effect, this time using the newer '''ip''' utility instead of the old '''ifconfig''' method. More information on the newer utility can be found [http://lartc.org/howto/lartc.iproute2.explore.html here].
	#~~Enable IP Forwarding~~		# Log in to your Fedora VM (do not turn off the Ubuntu Server VM)
	#Test system connectivity		## Change the IP configuration of your system (using the command line) to have a private static IP address of 192.168.1.1XX where XX is the number of your computer (note the 1 in front of the computer number this time so as to avoid an IP address conflict). Use a subnet mask of 255.255.255.0 there is no default gateway needed.
	##~~With~~ the ~~ping command~~		## Verify the IP address changes took effect.
	##~~With~~ the ~~traceroute command~~		## Put entries in the hosts file of both your Ubuntu and Fedora systems so that you can access the other one by name instead of address
	##~~With~~ the ~~netstat command~~		## Test connectivity between the systems using the ping command both with the addresses and the names you have set.
	##~~With~~ the ~~telnet or ftp utilities~~		## Restore your Fedora system to DHCP addressing
	~~#Examine network traffic with the tcpdump utility~~		# Shutdown your Fedora system and return to your Ubuntu Server VM
			## Restore your system to DHCP addressing
			## Test system connectivity to the Internet by pinging and tracing the route to google.com
			## Open the links or lynx web browser and start downloading http://mirror.rit.edu/debian-cd/6.0.1/i386/iso-dvd/debian-6.0.1-i386-DVD-1.iso
			### While the file is downloading try viewing the open connections on your system to see what ports are in use. Remember you can switch to another virtual terminal to do this!
			### While the file is downloading try capturing some of the packets
			## Cancel the file download and shutdown your system.

	=Chapter 9=		=Chapter 9=
	#Try viewing some of the predefined environment variables		#Try viewing some of the predefined environment variables