Learning Network: LinuxCBT feat Debian4x Edition Training

LinuxCBT feat Debian4x Edition Training | ISO | 4.68 GB
Genre: eLearning

DVDRip video-on OS Debian 4 in English
Description in English
# Introduction to & Installation of Debian GNU / Linux

* Install Debian Linux Using Various Methods
o Explore network layout
o Identify Debian GNU / Linux distribution sites
o Explain various methods of obtaining Debian GNU / Linux
o Explain the various branches
o Prep the Intel-based system for a minimal installation
o Install Debian Linux on x86 machine using local media and the Internet
o Install Debian Linux on Intel-based x86 machine using CD-ROMs
o Configure the installation process with Server-oriented packages
o Prep the Intel-based system for a PXE network installation
o Identify Network Installation ISO Image repositories
o Configure the installation process with Server-oriented packages
o Prepare VMWare host server
o Install Debian GNU / Linux on VMWare Server

# Debian GNU / Linux Fundamentals

* Explore Linux boot sequence
* Explore Debian GNU / Linux GNOME Desktop Interface & Default Applications
* Basic Debian GNU / Linux Skills
* Demonstrate usage of the following useful commands & concepts
o ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami, man, info
o alias, cat, file, chmod, chown, history
o Standard in / out, UNIX Pipes, Redirection, Command Chaining
o ps, df, free, vmstat, top, kill
o less & more, head & tail, find
o which & whereis, w, who
o PING (Packet Internet Groper)
o dig (Domain Information Groper) - used to query DNS servers
o Demonstrate typical usage of the vi text editor
o Demonstrate typical usage the nano text editor
o Tarball Archiving & compression of files & directories with tar | gzip | bzip2 | unzip
o Explain UNIX / Linux file security & permissions (-rwxrwxrwx)
o Use mount / umount to access CD-ROM and floppy devices
o Explore / etc / fstab (File system Table file)
o Explore TCP / IP Configuration
o Explore Wget and demonstrate its typical usage to interface to HTTP / FTP servers
o Explore GNU: GREP | Awk | Sed

* Advanced Package Management Tool (APT) Concepts
o Explain classes of Debian GNU / Linux Packages
o Identify Debian GNU / Linux Package Management Tools
o Inventory currently installed DEB packages
o Identify key Advanced Package Tool (APT) configuration files
o Search for Debian GNU / Linux packages using Advanced Package Tool (APT)
o Install / Update / Remove software using APT
o Configure APT to query multiple sources for packages
o Use DPKG to install a DEB package located on an EXT3 File System
o Configure APT to install packages from varying versions of Debian GNU / Linux
o Use Aptitude to manage Debian GNU / Linux packages
o Install Apt-Spy using APT to identify optimal mirrors

* Disk & Volume Management
o Provision additional Storage partitions using FDISK
o Use MKE2FS to provision multiple EXT2 & EXT3 File Systems
o Provision additional Storage partitions using Parted
o Provision additional Swap storage
o Use MKSWAP & SWAPON to enable additional Swap storage
o Update File System Table (FSTAB) to reflect system changes
o Explore Logical Volume Management (LVM) Configuration
o Create volume sets using: Logical Volume Management (LVM)

* Package Management
o Discuss various package management options
o Explore package management repositories
o Use DPKG to install a. deb package
o Install packages using 'apt-get'
o Manage packages using 'aptitude'

* INIT
o Explain Debian GNU / Linux System V Init Runlevel (0 - 6) concepts & applications
o Explore INIT configuration
o Identify key startup files, including scripts (inittab, Sscripts, Kscripts, etc.)
o Switch between run levels and evaluate
o Demonstrate using SSH to authenticate to remote Linux hosts without passwords

* Explore the CRON scheduling daemon & configuration
o Identify key Cron configuration scopes (Global & User)
o Explain Crontab file format and applicable options
o Define custom cron jobs system-wide
o Define custom cron jobs user-wide
o Evaluate results of cron jobs

# Core Network Services

* System Logging via Syslog, Syslog-NG and Logrotate
o Explanation of syslog facilities & levels
o Demonstrate syslog administration
o Demonstrate Cisco to Linux SYSLOG functionality
o Migrate system to Syslog-NG
o Discuss Syslog-NG features and benefits
o Explore automatic log rotation and customization via Logrotate
o Configure Logrotate to rotate & compress sample log files

* IPv4 & IPv6 Configuration
o Identify key files for the transition from DHCP to Static addressing
o Configure Linux client with static TCP / IP parameters for network communication
o Configure Virtual (Sub) Ethernet Interfaces to faciliate multiple IP addresses
o Explain IPv6 addresses (prefixes)
o Explore IPv6 configuration on Linux and Cisco router

* Implement Network Time Protocol (NTP) Client / Server
o Configure Network Time Protocol (NTP) to perform client / server time synchronization
o Identify NTP bounded UDP interfaces
o Synchronize Debian GNU / Linux NTP with RedHat Linux Stratum 2 NTP server
o Configure RedHat Linux NTP server to synchronize with Debian GNU / Linux server

* Trivial File Transfer Protocol Daemon (TFTPD)
o Discuss features and benefits
o Explore TFTPD configuration
o Backup Cisco router and firewall configuration using TFTPD
o Evaluate results

* Very Secure File Transfer Protocol Daemon (VSFTPD) & LFTP Client
o Discuss features and benefits
o Explore configuration
o Test FTP connectivity
o Explore LFTP client features
o Evaluate results

* Telnet Daemon (TELNETD) for temporary clear-text shell communications
o Discuss features and benefits
o Install TELNETD using Aptitude
o Explore configuration and usage
o Examine Message of the day banners (MOTD), / etc / issue file (pre-login banner / display info.)

* Commonly-used Network Utilities
o NETSTAT
o Traceroute & MTR (PING & Traceroute functionality)
o ARP
o IFCONFIG
o Route
o DIG & NSLOOKUP
o Whois

* Dynamic Host Configuration Protocol (DHCP) services
o Explain the various steps of the DHCP process
o Configure global & scope-level DHCP options
o Configure IP reservations based on layer 2 MAC addresses
o Enable Linux DHCP services
o Configure Windows / Linux clients to receive dynamic addresses from Linux
o Examine evidence of clients requesting addresses from DHCPD

* Implement the Berkeley Internet Naming Daemon (BIND) Domain Name Server (DNS)
o Implement BIND 9.x
o Configure BIND as a caching-only DNS server
o Test caching-only name resolution from Linux hosts
o Configure Linux / Windows 2003 clients to use Linux BIND DNS server
o Configure BIND as an Authoritative DNS server
o Test primary name resolution from Windows & Linux hosts
o Configure BIND as a secondary (slave) DNS server
o Evaluate results of BIND configuration using DIG
o Configure DNS zones
o Configure zone transfers
o Evaluate BIND's configuration files
o Implement IPv6 DNS AAAA records & evaluate forward IPv6 name resolution
o Implement IPv6 DNS reverse records & evaluate reverse IPv6 name resolution

* Network File System (NFS)
o Discuss features and benefits
o Explore NFS configuration
o Test NFS on clients and servers

* Implement Linux & Windows Integration via Samba
o Implement SMBFS integration with Debian GNU / Linux File System
o Mount Windows shares seamlessly using Samba File System (SMBFS)
o Configure FSTAB to support repetitive mounts
o Implement secure SMBFS credentials for mounting
o Install Samba Server support
o Install Samba Web-based Administration Tool (SWAT)
o Configure Samba file sharing
o Configure Samba with multiple NETBIOS aliases
o Configure Samba Windows Internet Name Server (WINS) support
o Evaluate Windows XP client access to Debian GNU / Linux Samba server

# Application Services - Linux | Apache | MySQL | PHP (LAMP)

* Web Application Services
o Implement Apache Web Server
o Examine httpd.conf file directives
o Implement virtual directories using Apache and symbollic links
o Implement Redirects using Locate and various Apache directives
o Configure virtual hosts bound to the primary IP address and port
o Configure virtual hosts bound to alternate virtual IP addresses and ports
o Implement Apache logging system per virtual host
o Configure basic authentication to virtual hosts containers via Directory directives
o Configure digest authentication
o Implementation of Webalizer Log Analysis software
o Generate web reports using Webalizer
o Implementation of PHP Dynamic Web Access Scripting Engine
+ Evaluate PHP Dynamic Web Access Scripting Engine installation results
+ Test basic PHP script-processing using sample scripts

* MySQL Relational Database Management System
o Install MySQL Relational Database Management System
o Secure access to MySQL
o Create sample MySQL databases
o Install PHPMyAdmin for web-based management of MySQL instances
o Explain & Secure access to PHPMyAdmin
o Explore PHPMyAdmin's interface

* Postfix MTA
o Install Postfix MTA
o Introduction to Postfix Message Transfer Agent (MTA)
o Use Mutt to demonstrate outbound mail handling using Postfix
o Explore Postfix Configuration

* Post Office Protocol Version 3 (POP3)
o Explain POP3 concepts and applications
o Implement POP3 daemon
o Connect to POP3 daemon using Windows Outlook Express client
o Use Mutt to send SMTP-based messages to POP3 account

* Internet Messaging Access Protocol (IMAP)
o Explain IMAP concepts and applications in comparison to POP3
o Implement IMAP services
o Connect to IMAP services from remote Windows Outlook Express client

* Web-based Mail Implementation using Squirrel-mail
o Describe required squirrel mail components for web-mail integration
o Install squirrel mail on Debian GNU / Linux system
o Configure Apache virtual directory for squirrel mail integration
o Configure Apache Virtual Host for squirrel mail integration
o Configure BIND DNS services for squirrel mail integration
o Explore squirrel mail's web-based interface

# Security Implementation Techniques

* TCP Wrappers (hosts.allow / hosts.deny)
o Discuss TCP Wrappers concepts & applications
o Identify primary package and key TCP Wrappers configuration files
o Demonstrate disabled TCP Wrappers configurations by attempting connectivity
o Examine pre and post TCP Wrappers configuration effects
o Implement TCP Wrappers for common services
o Test local & remote access to TCP Wrappers-protected host & services

* XINETD (Enhanced & Secure INETD Super Server Implementation)
o Upgrade Debian GNU / Linux system from INETD to XINETD
o Identify key XINETD configuration files
o Explain the contents and structure of xinetd.conf
o Restrict access to various daemons / services based on hosts & subnets
o Compare & contrast TCP Wrappers and XINETD
o Secure services with XINETD
o Insert common global xinetd.conf daemon / service defaults
o Configure XINETD to log via SYSLOG
o Configure XINETD to restrict number of spawned instances of daemons / services
o Configure port forwarding of daemons / services
o Configure XINETD to bind daemons / services to specific sub-interfaces (Virtual IP addresses)
o Explore additional XINETD features

* IPTABLES (Netfilter Linux Kernel-based Firewall)
o Discuss IPTABLES / Netfilter Concepts
o Explain IPTABLES default chains / filters and policies
o Examine TCP / ICMP communications pre-IPTABLES chains
o Implement ICMP inbound filtration based on various hosts
o Use Cisco PIX Firewall to verify ICMP debugging
o Filter traffic based on Layer-4 TCP / UDP (Source / Destination Ports) information
o Restrict access to various daemons (SSH / FTP / HTTP / etc.)
o Test connectivity locally and remotely (RedHat / Windows / etc.)

* Network Mapper (NMAP)
o Obtain, compile and install current version of NMAP
o Identify commonly used NMAP options / switches / parameters
o Perform default TCP SYN-based ethical scans of local and remote resources
o Explain typical TCP handshake protocol while using NMAP
o Examine the results of scans on remote Cisco firewall with debugging mode enabled
o Perform default TCP Connect-based ethical scans of local and remote resources
o Examine the results of scans on remote Cisco PIX Firewall with debugging mode enabled
o Use NMAP to scan using aliased and spoofed IP addresses
o Peform local ethical scans
o Identifiy key NMAP configuration files
o Use NMAP to perform operating system fingerprinting
o Peform subnet-wide ethical scans

* Nessus Vulnerability Scanner
o Download, compile, and prepare Nessus vulnerability scanner for deployment
o Implement Nessus client / server Security vulnerability scanner in SSL-mode
o Identify Nessus's key features and explore its graphical interface
o Ethical scan of the local system for vulnerabilities
o Examine scan results via the reporting engine
o Discuss mitigation techniques for suggested vulnerabilities
o Ethical scan of a fraction of the class C subnet by using CIDR
o Examine the scan results and discuss
o Ethical scan of the entire class C subnet
o Examine Nessus process utilization while vulnerability scans are in progress

* Lockdown (Debian GNU / Linux System Lockdown)
o Explain potential network-based entry points to the system
o Identify superfluous daemons / services using NETSTAT & NMAP
o Disable superfluous daemons / services using update-rc.d and proper scripts
o Identify changes in the system as a result of performing the lockdown
o Disable superfluous daemons / services using XINETD
o Restrict source address access to daemons / services using XINETD
o Restrict bind address for daemons / services using XINETD
o Discuss application-layer security for added protection (MySQL / Apache / Sendmail / SSH / Nessus)
o Force SSHD to bind to desired layer-3 IP address for controlled security
o Secure the system using IPTABLES & TCP Wrappers for added security

* TCPDump & Wireshark
o Discuss features and benefits
o Explore TCPDump usage
o Capture interesting traffic
o Analyze with Wireshark

* Snort 2.8x Intrusion Detection System (IDS)
o Obtain, and install Snort pre-requisites (libpcap / libpcre / etc.)
o Obtain, compile and install the Snort Intrusion Detection System (IDS)
o Identify and explain key operating modes (Sniffer / Logger / IDS)
o Run Snort in all three modes and examine the results
o Output Snort logs to ASCII text format and examine the results
o Output Snort logs to binary format and examine the results
o Use Snort with Berkeley Packet Filter (BPF) to parse logs
o Implement Snort with BPF to filter real-time traffic
o Obtain and install requisite MySQL libraries for Snort
o Recompile Snort IDS with MySQL support
o Implement Snort IDS with MySQL integration for real-time reporting
o Implement ACID web-based front-end for examining Snort logs
Video Codec : XviD
Video : XVID MPEG-4 800 x 600 at 15.000 fps
Audio : MPEG 1 Audio, Layer 3 (MP3) at 32.0 kbit / s 1 channel, 44.1 kHz

Download

http://i1189.photobucket.com/albums/z431/reevn/photo/preaccos.png

Learning Network

Sunday, May 8, 2011

LinuxCBT feat Debian4x Edition Training

About Me

Followers

Books Collection

Blog Archive