Red Hat Linux Networking and Security Administration

Prerequisites:

RH133 Red Hat Linux System Administration or equivalent experience with Red Hat Enterprise Linux. To further your suitability for this course take the RH253 Pre-assessment Questionnaire.

Course Description:

This course is for Linux or UNIX system administrators who already have some real world experience with Red Hat Enterprise Linux systems administration and want a first course in networking services and security and for Linux- and/or UNIX- systems administrators who want to build skills at configuring common network services and security administration using Red Hat Enterprise Linux.

Leads to certification
RHCT – Red Hat Certified Technician

Delegates will learn how to:

• Understand the available networking services on Red Hat Linux
• Configure a Red Hat Linux server
• Configure, administer and support the Domain Name System (DNS)
• Configure the Dynamic Host Configuration Protocol (DHCP)
• Implement the Network Information Service (NIS)

This course includes the following modules:

System Performance and Security

• Concepts and Practices
• System Faults and Breaches
• Method of Fault Analysis
• Benefits of System Monitoring
• Managing Processes by Account
• Hands-on lab: System Monitoring

System Service Access Controls

• Service and Network Access Controls
• System Initialisation and Service Management
• Service and Application Access Controls
• tcp_wrappers Configuration
• Security Enhanced Linux (SELinux)
• Hands-on Lab: Controlling access to certain hosts

Network Resource Access Controls

• Internet Protocol and Routing
• IPv6: Dynamic Interface Configuration
• IPv6: StaticInterface Configuration
• IPv6: Routing Configuration
• Netfilter Overview
• Rules: General Considerations
• Connection Tracking
• Network Address Translation (NAT)
• IPv6 and ip6tables
• Hands-on Lab: Securing Networking

Organising Networked Systems

• Host Name Resolution
• DNS-Specific Resolvers
• Trace a DNS Query with dig
• Exploring DNS with host
• Service Profile: DNS
• Getting Started with BIND
• bind-chroot Package
• caching-nameserver Package
• Remote Name Daemon Control (rndc)
• The DHCP Service
• DHCP Overview
• Configuring an IPv4 DHCP Server
• Hands-on Lab: Implement a Minimal DNS Server

Network File Sharing Services

• File Transfer Protocol (FTP)
• Network File Service (NFS)
• Port options for the Firewall
• Samba services
• Configuring Samba
• Hands-on Lab: Network File Sharing Services

Web Services

• Apache Overview
• Apache Server Configuration
• Virtual Hosts
• Apache Access Configuration
• CGI
• Apache Encrypted Web Server
• Squid Web Proxy Cache
• Hands-on Lab: Implementing Web (HTTP) Services

Electronic Mail Services

• Essential E-mail Operation
• Simple Mail Transport Protocol
• Sendmail SMTP Restrictions
• Sendmail Operation
• Using alternatives to Switch MTAs
• Postfix Configuration
• Postfix SMTP Restrictions
• Postfix Operation
• Mail Retrieval Protocols
• Hands-on Lab: Electronic Mail

Securing Data

• The Need For Encryption
• Symmetric Encryption
• Asymmetric Encryption
• Public Key Infrastructures
• Digital Certificates
• Hands-on Lab: Securing Data

Account Management

• Account Management
• Account Information (Name Service)
• Name Service Switch (NSS)
• Pluggable Authentication Modules (PAM)
• PAM Operation
• Utilities and Authentication
• Hands-on Lab: Account Management Methods