Software -Networking


Table of Contents

15. Software -Securities
OpenSSH
Configure and optimise Openssh
Configure the /etc/ssh/ssh_config file
Configure the /etc/ssh/sshd_config file
Configure OpenSSH to use TCP-Wrappers/inetd super server
OpenSSH Per-User Configuration
OpenSSH Users Tools
scp
Installed files
Free SSH clients for Windows
16. Software -Securties(commercial)
Linux SSH2 Client/Server
Configure and Optimise SSH2
Configure the /etc/ssh2/ssh2_config file
Configure the /etc/ssh2/sshd2_config file
Configure sshd2 to use tcp-wrappers/inetd super server
Configuration of the /etc/pam.d/ssh file
Ssh2 Per-User Configuration
SSH2 Users Tools
Installed files
17. Software -Securities/System Integrity
Linux Tripwire 2.2.1
Configure the /var/tmp/install.cfg file
Configuration files
Configure the /usr/TSS/policy/twpol.txt file
Securing Tripwire for Linux
Often used Commands
Integrity or Interactive Check Mode
Installed files
18. Linux Tripwire ASR 1.3.1
Install, Compile and Optimize
Configurations
Configure the /etc/tw.config file
Configure the /etc/cron.daily/tripwire.verify script
Security Issue
Tripwire in Interactive Checking Mode
Run Tripwire in Database Update Mode
Installed Files
19. Software -Securities/Management & Limitation
Linux GnuPG
Often used Commands
Importing keys
Key signing
Encrypt and decrypt
Exporting your public key
20. Set Limits using Qouta
Qouta
Modify the /etc/fstab file
Create of the quota.user and quota.group
edquota
The grace period parameter
Assign quota for a particular group
Assign quota for groups of users with the same value
Often used Commands
21. Software -Networking
Linux DNS and BIND Server
Configure
Caching-only name Server
Primary master name Server
Secondary slave name Server
/etc/rc.d/init.d/named script
Run ISC BIND/DNS in a chroot jail
The syslog daemon
Clean-up and Test the new chrooted jail
DNS Administrative Tools
DNS Users Tools
Installed files
22. Software -Server/Mail Network
Linux Sendmail Server
Compile and optimize
Configurations
The /etc/sendmail.mc file /Central Mail Hub
Build and Tweak Sendmail
The null.mc file
The /etc/mail/access and access.db files
The /etc/mail/aliases and aliases.db files
The /etc/mail/ Directory
The /etc/mail/local-host-names file
Configure the /etc/sysconfig/sendmail file
The /etc/rc.d/init.d/sendmail script file
Secure Sendmail using smrsh
The /etc/mail/aliases file
Limit queue processing to root
The SMTP greeting message
Sendmail Administrative Tools
Sendmail Users Tools
Installed files: Sendmail -Central Mail Hub
Installed files: Sendmail -Local server/client
23. Linux IMAP & POP Server
Configure and Compile
Configure to tweak
The /etc/pam.d/imap file
Enable IMAP or POP via the tcp-wrappers inetd super server
Securing IMAP/POP
Installed files
24. Software -Networking/Encryption
Linux OPENSSL Server
Compile and Optimize
Configure OpenSSL to optimise
The /etc/ssl/openssl.cnf file
Create the /usr/bin/sign.sh program file
Commands -often used
Securing OpenSSL
Installed files
25. Linux FreeS/WAN VPN
IPSEC/VPN -FreeS/WAN
Compile, insert FreeS/WAN into the kernel
Reconfigure and install the kernel with FreeS/WAN VPN support
Configure to optimise
Automatic or Manual Key connections
The /etc/ipsec.conf file
The /etc/ipsec.secrets file
Configure RSA private keys secrets
Required network setup for IPSec
Testing the installation
Further documentation
Installed files
26. Linux OpenLDAP Server
Compile ans Install
Compile and Optimize
Configurations
Configure the /etc/ldap/slapd.conf file
Configure the /etc/rc.d/init.d/ldap script file
Securing OpenLDAP
OpenLDAP Creation and Maintenance Tools
LDMB backend database off-line
Create the LDMB backend database on-line
ldapmodify
OpenLDAP Users Tools
The Netscape Address Book client for LDAP
Installed files
27. Linux PostgreSQL Database Server
Install PostgreSQL
Compile and Optimize
Database installation using superuser account
Configuration files
Configure the /etc/rc.d/init.d/postgresql script file
Commands often used
Installed files
28. Software -Server/Proxy Network
Linux Squid Proxy Server
Configure and Optimize
Improve performance Using GNU malloc library
Compile and Optimize
Configurations
Configure the /etc/squid/squid.conf file -in httpd-accelerator mode
Configure of the /etc/squid/squid.conf file -/proxy-caching mode
Configure the /etc/rc.d/init.d/squid script file -/all configurations
Configure the /etc/logrotate.d/squid file
Securing and Immunize Squid
Optimizing Squid
The cachemgr.cgi
Netscape Proxies Configuration
Installed files
29. Software -Network Server, web/Apache
Linux MM Shared Memory Library
Compile
Installed files
Linux Apache Web Server
Compile and Optimize
Configure and apply PHP4 to Apache source
Apply mod_perl to Apache source tree
Install Apache
Post install Configuration
Configure the /etc/httpd/conf/httpd.conf file
Configure the /etc/logrotate.d/apache file
Configure the /etc/rc.d/init.d/httpd script file
PHP4 server-side scripting
Perl module Devel::Symdump
Installed files
CGI.pm Perl library
Installed files
Securing Apache
users authentication with .dbmpasswd password file
Immunize configuration files like httpd.conf
Apache in a chroot jail
Apache to use shared libraries
The /chroot/etc directory
Test the new chrooted jail
Configure the new /etc/logrotate.d/apache file
Optimizing Apache
Installed files for Apache Web Server
Installed files /PHP4
Installed files by mod_perl
30. Optional component to install with Apache
Linux Webalizer
Compile
Configurations
Configure the /etc/webalizer.conf file
Make Apache aware of Webalizer output directory
Running Webalizer manually first time
Run Webalizer automatically with a cron job
Installed files
Linux FAQ-O-Matic
Compile and install FAQ-O-Matic
Make Apache aware Faq-O-Matic file's location
Configure your FAQ-O-Matic
Installed files
Linux Webmail IMP
Set up PHPLib
Compile to install Webmail IMP
Configure and create Webmail IMP SQL database
Configure your php.ini from PHP4
Configure Apache to recognize Webmail IMP
Configure Webmail IMP via your web browser
31. Software -Server/File Sharing-Network
Linux Samba Server
Configure Samba
Compile and optimize
Configurations
Configuration of the /etc/smb.conf file
Configure the /etc/lmhosts file
Configure the /etc/pam.d/samba file
Encrypted Samba password file for clients
Optimizing Samba
Tuning the buffer cache
Tuning the buffermem
Further documentation
Samba Administrative Tools
Samba Users Tools
The /etc/rc.d/init.d/smb script file
Securing Samba
Installed files
32. Linux FTP Server
chroot'd Guest FTP access
Setup an FTP user account minus shells
Setup a chroot user environment
Configurations
Configure the /etc/ftphosts file
Configure the /etc/ftpusers file
Configure the /etc/ftpconversions file
Configure the /etc/pam.d/ftp file
Configure the /etc/logrotate.d/ftpd file
Configure ftpd to use tcp-wrappers inetd
FTP Administrative Tools
Securing FTP
The special file .notar
Installed files
Two ducks!

Abstract

Linux being a product of the net revolution is a natural choice for a web server, mail server, a file and print server; if it is a part of your intranet environement, among various other roles it can perform superbly well. In this part we take a look at various avatars it can assume and serve your organisation for a long time to come. All distributions of linux whether be it RedHat or SuSe do provide in binary format tools/software for your linux to act as a Web server or a Mail server to mention a few, but the amount of advancements which happen in linux world are beyond the grasp of these companies for it to catch up. The situation is if something can be achieved, it will be done in shortest possible time hence we have used always source tarballs downloaded from the respective websites of the software(s) used as example in this book. This affords us the capability to configure, choose and optimise according to our needs. This part attempts to highlight the capablities of linux to act as a full fledged Web server, Mail server, a file and print server, as a B2B e-commerce point where the need of the hour is secure environement, etc. Enjoy!