Course objectives

The OSI model of ISO

Diagnosing a network problem
Virtual Networking : VLAN and VPN
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
Linux system and network administration :
OYETOLA,
Eric ATTOU Linux network administration
Course
objectives

The OSI Victor OYETOLA

model of ISO
Routing under
Eric ATTOU
Linux

Diagnosing a
network
problem
local diagnostics 21 mars 2016
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

1 Course objectives
Linux system
and network 2 The OSI model of ISO
administra-
tion : Linux Routing under Linux
network ad-
ministration 3 Diagnosing a network problem
Victor local diagnostics
OYETOLA,
Eric ATTOU remote diagnostics
Course
4 Virtual Networking : VLAN and VPN
objectives 5 Network security
The OSI
model of ISO
Network security policy
Routing under
Linux Packet filtering
Diagnosing a 6 Networking services
network
problem Managing printing service
local diagnostics
remote DHCP, DNS
diagnostics

Virtual
Telnet, FTP, NFS
Networking :
VLAN and
HTTP
VPN 7 Mailing service : mail, popd, imapd, webmail(roundcube,
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Course objectives
Virtual Networking : VLAN and VPN
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU
By the end of this lesson, students are expected to develop
Course
objectives abilities in network management under Linux OS.
The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system OSI model consists of seven layers namely :

and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux The OSI model consists of 7 layers.
network ad-
ministration
Physical layer determines
Victor
OYETOLA, data (bits) transmission
Eric ATTOU
electrical characteristics
Course mechanical characteristics
objectives
Data Link layer : its role is to establish links between
The OSI
model of ISO Physical and Network layers
Routing under
Linux assembles bits into frames
Diagnosing a ensures that bits transmitted are error free
network
problem ensures data retransmission
local diagnostics controls physical media access
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network Network : manages packets routing from a source to a
administra-
tion : Linux destination. Relies on :
network ad-
ministration Routing protocols
Victor Routed protocols
OYETOLA,
Eric ATTOU Transport : responsibles for complete messages delivery.
Course Session : Organizes and synchronizes data exchange
objectives
between peers
The OSI
model of ISO
Routing under
Presentation : Format the data to suit to end user’
Linux
semantic
Diagnosing a
network
problem
Application : It’s the entry point between end users and
local diagnostics the network. It provides users with networking services
remote
diagnostics

Virtual Each layer uses services from its lower layer and provides
Networking :
VLAN and
services to its upper layer.
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics This course will be focused on Network and Application layers
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux The OSI model consists of 7 layers.
network ad-
ministration
Physical layer determines
Victor
OYETOLA, data (bits) transmission
Eric ATTOU
electrical characteristics
Course mechanical characteristics
objectives
Data Link layer : its role is to establish links between
The OSI
model of ISO Physical and Network layers
Routing under
Linux assembles bits into frames
Diagnosing a ensures that bits transmitted are error free
network
problem ensures data retransmission
local diagnostics controls physical media access
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network Network : manages packets routing from a source to a
administra-
tion : Linux destination. Relies on :
network ad-
ministration Routing protocols
Victor Routed protocols
OYETOLA,
Eric ATTOU Transport : responsibles for complete messages delivery.
Course Session : Organizes and synchronizes data exchange
objectives
between peers
The OSI
model of ISO
Routing under
Presentation : Format the data to suit to end user’
Linux
semantic
Diagnosing a
network
problem
Application : It’s the entry point between end users and
local diagnostics the network. It provides users with networking services
remote
diagnostics

Virtual Each layer uses services from its lower layer and provides
Networking :
VLAN and
services to its upper layer.
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics This course will be focused on Network and Application layers
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network Setting Linux as a Gateway
administra-
tion : Linux
network ad- A gateway is a router designed to connect two or more
ministration
networks. Such a machine provides a way to join each of the
Victor
OYETOLA, connected networks through a Routing table. Linux OS
Eric ATTOU
supports routing. To enable this function just enable forwarding
Course in /etc/sysctl.conf
objectives

The OSI Enabling forwarding

model of ISO
Routing under
Linux
net.ipv4.conf.default.forwarding = 1
Diagnosing a
network Once you’ve enabled routing, you could now define a routing
problem
local diagnostics strategy :
remote
diagnostics
NAT : It will be covered later in netfilter config discussion ;
Virtual
Networking : Dynamic routing : using quagga a packet that helps
VLAN and
VPN emulate a real cisco router
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration Static routing
Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
Adding routes on Delhi
tion : Linux
network ad-
ministration
Delhi router
Victor
OYETOLA, route add -net 172.16.0.0/24 dev s0
Eric ATTOU
route add -net 192.168.1.0/24 dev e0
Course
objectives
route add default gw 172.16.0.2
The OSI
model of ISO
Routing under
Adding routes on Mumbai
Linux

Diagnosing a
network
problem
Mumbai router
local diagnostics
remote route add -net 172.17.0.0/24 dev s0
diagnostics

Virtual
route add -net 192.168.2.0/24 dev e0
Networking :
VLAN and
route add default gw 172.17.0.1
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration
Adding routes on Kolkata
Victor
OYETOLA,
Eric ATTOU
Kolkata router
Course
objectives route add -net 172.16.0.0/24 dev s0
The OSI
model of ISO
route add -net 172.17.0.0/24 dev s1
Routing under
Linux
route add -net 10.0.0.0/8 dev e0
Diagnosing a route add -net 192.168.2.0/24 gw 172.17.0.2
network
problem route add -net 192.168.1.0/24 gw 172.16.0.1
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and This is a network with 3 Linux routers. Write Linux command
VPN
to setup
Victorstatic routing
OYETOLA, on each
Eric ATTOU Linuxof theandrouters
system network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration Dynamic Routing
Victor
OYETOLA,
Eric ATTOU With static routing, routing table in a network with multiple
Course
destination frequently evolves to hundred (or more)
objectives destinations. This estate make it hard to maintain the routing
The OSI
model of ISO
informations statically. Hence the usage of dynamic routing.
Routing under
Linux
Dynamic routing relies on routing protocols (RIP, OSPF,
Diagnosing a BGP). Note that dynamic routing is implemented by quagga.
network
problem quagga is based on the old zebra deamon which read routing
local diagnostics
remote
information from dedicated daemons (ripd, ospfd, bgpd, etc).
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Routing under Linux
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration Dynamic Routing
Victor
OYETOLA,
Eric ATTOU To enable one of these daemons :
Course activate the daemon in /etc/quagga/daemons
objectives

The OSI
create the daemon’s configuration file in /etc/quagga ex :
model of ISO
Routing under
ripd.conf
Linux

Diagnosing a
Setting the configuration of a given protocol, requires you know
network
problem
how it works. You may refer to quagga-doc at :
local diagnostics http ://www.nongnu.org/quagga/docs/docs-info.html
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
local diagnostics
Virtual Networking : VLAN and VPN
remote diagnostics
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU It’s common to troubleshout a network failure or service
operation. It’s very important to have an eye behind the scene,
Course
objectives even if all things seem in order to avoid supprises. Linux admins
The OSI
model of ISO
have a variety of tools to achieve this goal.
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
local diagnostics
Virtual Networking : VLAN and VPN
remote diagnostics
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra- local diagnostics
tion : Linux
network ad-
ministration
net-tools package enable netstat command on Linux. This
Victor
OYETOLA, command is used to view actual networking activity on a given
Eric ATTOU
host. By default, netstat simply lists you opened connexions on
Course the host. Here are some frequently use options :
objectives

The OSI -t : filters the output to show, only TCP connexions ;

model of ISO
Routing under
Linux -u : filters the output to show, only UDP connexions ;
Diagnosing a
network
-a : lists in listening socket(which are actually waiting for
problem
local diagnostics
connexion) ;
remote
diagnostics -n : shows IP address, port number ;
Virtual
Networking : -c : continually refreshes connexions list ;
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
local diagnostics
Virtual Networking : VLAN and VPN
remote diagnostics
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
local diagnostics
ministration

Victor
OYETOLA, netstat
Eric ATTOU
# netstat -tupan
Course
objectives Active Internet connexions
The OSI Proto Recv-Q Send-Q Adresse locale Adresse distante Etat
model of ISO
Routing under
PID/Program name
Linux
tcp 0 0 0.0.0.0 :111 0.0.0.0 :* LISTEN 397/rpcbind
Diagnosing a
network tcp 0 0 0.0.0.0 :22 0.0.0.0 :* LISTEN 433/sshd
problem
local diagnostics tcp 0 0 196.192.16.1 :22 192.168.1.129 :452 ESTABLISHED
remote
diagnostics 1172/sshd : roland
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
local diagnostics
Virtual Networking : VLAN and VPN
remote diagnostics
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad- remote diagnostics
ministration

Victor
OYETOLA, nmap is equivalent to netstat as it achieves the same goal.
Eric ATTOU
However nmap is suited for remote use. It probes for a set of
Course classic network services port on a remote server.
objectives

The OSI
nmap has many options :
model of ISO
Routing under
Linux
-A : enable softwares(os, services) version detection
Diagnosing a capabilities ;
network
problem -T4 : rapid execution and gathering of target’s hostname
local diagnostics
remote
diagnostics
-sV : equivalent to -A
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
local diagnostics
Virtual Networking : VLAN and VPN
remote diagnostics
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux nmap
network ad-
ministration # nmap -A localhost
Victor Starting Nmap 6.47 ( http ://nmap.org ) at 2015-03-09 16 :46
OYETOLA,
Eric ATTOU CET
Course
Nmap scan report for localhost (127.0.0.1)
objectives
Host is up (0.000013s latency).
The OSI
model of ISO
Other addresses for localhost (not scanned) : 127.0.0.1
Routing under
Linux Not shown : 997 closed ports
Diagnosing a PORT STATE SERVICE VERSION
network
problem 22/tcp open ssh OpenSSH 6.7p1 Debian 3 (protocol 2.0
local diagnostics
remote 25/tcp open smtp Exim smtpd 4.84
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
local diagnostics
Virtual Networking : VLAN and VPN
remote diagnostics
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
remote diagnostics
tion : Linux
network ad-
ministration Others remote tool are :
Victor
OYETOLA,
traceroute
Eric ATTOU
mtr
Course In addition to these basic command line tools, developper had
objectives

The OSI
developped GUI/web tools such as
model of ISO
Routing under
Observium
Linux

Diagnosing a
bandwidthd
network
problem mrtg
local diagnostics
remote cacti
diagnostics

Virtual smokeping
Networking :
VLAN and nagios
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
local diagnostics
Virtual Networking : VLAN and VPN
remote diagnostics
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad- remote diagnostics
ministration

Victor
OYETOLA, Many of these extra network monitoring tools use SNMP
Eric ATTOU
SNMP is a network protocol used to request informations from
Course networking device (cpu load, ram, hard disk usage,
objectives

The OSI
uptime,running processes). It’s based on two main concepts :
model of ISO
Routing under
Linux
The Manager
Diagnosing a the Agent
network
problem
local diagnostics
the MIB
remote
diagnostics
SNMP uses UDP on ports 161 and 162
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Packet filtering
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system A networking infrastructure is vital to business survivability. It

and network
administra- will be protected against various risks. A risk must be seen as a
tion : Linux
network ad- potential threats, weakness or vulnerabilities that may be
ministration
exploited to wreak havoc on the system or the business it
Victor
OYETOLA, supports.
Eric ATTOU
To avoid damages on their systems, enterprises nowadays
Course
objectives
implements procedures, strategies to control, restrict and
The OSI
harden access to their assets. These mechanisms are called
model of ISO Security Policies and aim to guaranty :
Routing under
Linux
- Confidentiality
Diagnosing a
network - Integrity
problem
local diagnostics
- Availability
remote
diagnostics Security policies help identify valuable assets, the threats they
Virtual are subjected to and a way to protect them.
Networking :
VLAN and When defining security policy, Security experts usually define
VPN
security
Victor perimeter Once theLinux
OYETOLA, Eric ATTOU perimeters are administration
system and network defined, :you Linux could
network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Packet filtering
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
Netfilter
OYETOLA,
Eric ATTOU
A Packet filter or Firewall is a software or hardware
infrastructure used to filter packets coming into, coming from
Course
objectives or passing through its. It’s often positionned as an entry point
The OSI on a network.
model of ISO
Routing under Linux kernel comes with an integrated firewall : netfilter
Linux

Diagnosing a
netfilter offers iptables, a tool used to configure
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem
Virtual Networking : VLAN and VPN Packet filtering
Network security
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration Netfilter Overview
Victor Netfilter works base on four tables :
OYETOLA,
Eric ATTOU
netfilter tables
Course -Filter : define filtering rules ;
objectives

The OSI
-Nat : used to alter source or destination IP addresses or ports
model of ISO of a packet ;
Routing under
Linux
-Mangle
Diagnosing a
network -Raw
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration
Domain Name Service
Victor
OYETOLA,
Eric ATTOU
DNS is required on Internet network. It helps mapp host
Course name to IP addresses (and vice versa). In so doing DNS
objectives
enables Internet users to use the name instead of the IP
The OSI
model of ISO addresses since the latter is hard to remember. Ex : you’ve
Routing under
Linux just retained www.uac.bj instead of 196.192.16.3
Diagnosing a
network DNS informations are grouped by Zones representing a
problem
local diagnostics domaine.
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network Domain Name Service
administra-
tion : Linux
network ad-
Each zone contains various Resources Records. A
ministration Resource record may be :
Victor SOA : Start Of Authority record define the domain name
OYETOLA,
Eric ATTOU where the actual DNS server start its authority and
miscellaneous parameters
Course
objectives A : maps a hostname to an IPv4 address
The OSI
CNAME : an alias definition of an already defined A
model of ISO resource
Routing under
Linux MX : defines one or more mail exchanger for the zone. If
Diagnosing a there is more than one MX records, they are listed by
network
problem ascendant priority. The lower MX record priority
local diagnostics
remote
determines the SMTP server to contact on the 1st hand.
diagnostics
PTR : inverse of an A record, ie maps an IPv4 address to
Virtual
Networking : a hostname. It’s store in the reverse resolution zone
VLAN and
VPN
name based on IPv4 addresses range.
Ex : 16.192.196.in-addr.arpa
Victor OYETOLA, Eric ATTOU isnetwork
Linux system and the reverse zone
administration for network admi
: Linux
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU
Domain Name Service
Course
objectives NS : makes correspondance between a domain name and
The OSI the domain name server that have authority on the domain
model of ISO
Routing under name.
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
Domain Name Service
ministration

Victor
OYETOLA,
Package Bind9 is used to deploy DNS server under Linux OS.
Eric ATTOU Use apt-get install bind9 to install the package. Once install,
Course bind stores its configuration files in /etc/bind. This directory
objectives
contains :
The OSI
model of ISO
Routing under
zone declaration file : this file (named.conf) contains
Linux
declaration of the zones the actual name server is
Diagnosing a
network responsible of
problem
local diagnostics
remote
zone databases these are individual zone database where
diagnostics
are resources are resolved
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra- Domain Name Service(zone declaration)
tion : Linux
network ad-
ministration

Victor
zone declaration
OYETOLA,
Eric ATTOU zone ”uac.bj” {
Course
type master ;
objectives file ”/etc/bind/db.uac.bj” ;
The OSI
model of ISO
allow-query { any ; } ;
Routing under
Linux
};
Diagnosing a zone ”ifri.uac.bj” {
network
problem type master ;
local diagnostics
remote
file ”/etc/bind/db.ifri.uac.bj” ;
diagnostics
allow-query { any ; } ;
Virtual
Networking : };
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration Domain Name Service :zone declaration
Victor
OYETOLA, zone declaration
Eric ATTOU
zone ”196.192.16.0.in-addr.arpa” {
Course
objectives type master ;
The OSI file ”/etc/bind/db.196.192.16” ;
model of ISO
Routing under allow-query { any ; } ;
Linux

Diagnosing a
};
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system Domain Name Service(zone database) Below is a sample

and network
administra- zone database (/etc/bind/db.uac.bj) content
tion : Linux
network ad-
ministration dns zone
Victor $TTL 604800
OYETOLA,
Eric ATTOU @ IN SOA uac.bj. admin.uac.bj. (
Course
20150121 ; Serial
objectives
604800 ; Refresh
The OSI
model of ISO 86400 ; Retry
Routing under
Linux 2419200 ; Expire
Diagnosing a 604800 ) ; Negative Cache TTL
network
problem @ IN NS ns1
local diagnostics
remote @ IN NS ns2
diagnostics

Virtual
@ IN MX 2 mail
Networking :
VLAN and
@ IN MX 10 mail1
VPN ifri IN A 196.192.16.20
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor Domain Name Service(zone database)

OYETOLA,
Eric ATTOU
dns zone
Course
objectives mail IN A 196.192.16.1
The OSI mail1 IN A 196.192.16.1
model of ISO
Routing under dns IN CNAME ns
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
Domain Name Service(reverse zone database) reverse zone
administra-
tion : Linux
16.192.196.in-addr.arpa content
network ad-
ministration
dns reverse zone
Victor
OYETOLA, $TTL 604800
Eric ATTOU
@ IN SOA uac.bj. admin.uac.bj. (
Course
objectives
20150121 ; Serial
The OSI
604800 ; Refresh
model of ISO
Routing under
86400 ; Retry
Linux
2419200 ; Expire
Diagnosing a
network 604800 ) ; Negative Cache TTL
problem
local diagnostics 1 IN PTR ns.ifri.uac.bj.
remote
diagnostics 2 IN PTR moodle.ifri.uac.bj.
Virtual
Networking :
3 IN PTR www.uac.bj.
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration
Linux system offers utilities to troubleshoot/query dns service :
Victor
OYETOLA, nslookup : is an administrative tool to query dns servers.
Eric ATTOU
Nslookup queries dns servers either in interactive or
Course non-interactive mode. By the event of Bind9, the ISC planned
objectives
to deprecate nslookup in favor of dig and host.
The OSI
model of ISO dig : Domain Information Groper is a command-line tools to
Routing under
Linux query DNS server.
Diagnosing a
network
host : host is a simple utility for DNS lookup
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
Nslookup interactive mode
tion : Linux
network ad-
ministration
nslookup
Victor root@hero : # nslookup
OYETOLA,
Eric ATTOU server ns1.uac.bj
Course
Default server : ns1.uac.bj
objectives Address : 196.192.16.3#53
The OSI
model of ISO
developpez.com
Routing under
Linux
Server : ns1.uac.bj
Diagnosing a Address : 196.192.16.3#53
network
problem Non-authoritative answer :
local diagnostics
remote
Name : developpez.com
diagnostics

Virtual
Address : 87.98.130.52
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration
Dig examples
Victor
OYETOLA, Dig with mx option
Eric ATTOU
root@hero : # dig uac.bj mx
Course
objectives
; ; QUESTION SECTION :
The OSI
;uac.bj. IN MX
model of ISO
Routing under
; ; ANSWER SECTION :
Linux
uac.bj. 604800 IN MX 10 mail.uac.bj.
Diagnosing a
network uac.bj. 604800 IN MX 20 calavi.uac.bj.
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration DHCP Dynamic Host Configuration Protocol provides a
Victor network with automatic stations IP setting configuration
OYETOLA,
Eric ATTOU capabilities.
A DHCP server sends various parameters to a host that request
Course
objectives network settings namely :
The OSI
model of ISO
the host’s IP address ;
Routing under
Linux
the network ID ;
Diagnosing a the DNS server ;
network
problem and many others informations ;
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system DHCP

and network
administra- The Internet Software Consortium has developped
tion : Linux
network ad- isc-dhcp-server. Once you’ve installed this package, you need
ministration
to customize /etc/dhcp/dhcpd.conf to define the following
Victor
OYETOLA, directives : option domain-name : your domain name uac.bj
Eric ATTOU
option domain-name-servers : the dns servers that have
Course
objectives
authority on the domain. ex : ns.uac.bj
The OSI
subnet : define your network IP ranges in the subnet directive :
model of ISO
Routing under
Linux
DHCP config
Diagnosing a subnet 196.192.16.0 netmask 255.255.255.0 {
network
problem option routers 196.192.16.1 ;
local diagnostics
remote option broadcast-address 196.192.16.255 ;
diagnostics

Virtual
range 196.192.16.128 196.192.16.254 ;
Networking :
VLAN and
ddns-domainname ”uac.bj” ;
VPN }
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU
DHCP You must also have an eye on : default-lease-time
Course
objectives max-lease-time
The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system Telnet and FTP serveur

and network
administra- Telnet : is a server that helps emulate VT-x terminal. Linux
tion : Linux
network ad- system has telnetd daemon you can install through.It works on
ministration
port 23
Victor
OYETOLA,
Eric ATTOU telnet
Course
apt-get install telnetd
objectives

The OSI FTP : is a communication protocol that’s used to share files

model of ISO
Routing under
between workstations. FTP server listen on ports 20, 21.
Linux
Various implementations of the protocol exist under Linux OS,
Diagnosing a
network namely : proftpd, vsftpd, ftpd. But vsftpd is known to be
problem
local diagnostics more secure.
remote
diagnostics
telnet
Virtual
Networking :
VLAN and
apt-get install vsftpd
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
NFS : is a protocol that enables access to a remote file system
tion : Linux
network ad-
via a network. Almost all Unix like OSes support NFS. But, if
ministration you prefer working on Windows, you can use Samba server
Victor
OYETOLA,
Linux system consider NFS server as a kernel module. Install it
Eric ATTOU
with :
Course
objectives NFS
The OSI apt-get install nfs-kernel-server
model of ISO
Routing under
Linux
Once installed, its configuring is very simply done in
Diagnosing a
network /etc/exports
problem
local diagnostics
In this file, any directory to be share is defined as well as the
remote
diagnostics clients machines/users from which access to the given file is
Virtual
Networking :
authorized
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration
nfs example
Victor
OYETOLA,
Eric ATTOU
/home/share *(rw,sync,no root squash)

Course Once, the share is defined on the server, any authorized client
objectives
could mount it through :
The OSI
model of ISO
Routing under
Linux
nfs example
Diagnosing a mount server :/home/share /client mount point
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration HTTP : is the Hypertext Transfert Protocol, the base
Victor foundation of the web. It was originally developped for file
OYETOLA,
Eric ATTOU transfert purpose.
Linux OS provides one of the most popuplar HTTP server :
Course
objectives apache2
The OSI To install this server, just run :
model of ISO
Routing under
Linux
apt-get install apache2.
Diagnosing a By default, Apache listens on port 80. But you may customize
network
problem
the port, edit /etc/apache2/ports.conf
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra- After installing apache2, keep the following in mind. Apache
tion : Linux
network ad- comes with various modules stored in
ministration
/etc/apache2/mods-available, and sites configs are in
Victor
OYETOLA, /etc/apache2/sites-available .
Eric ATTOU

Course
apache2 config
objectives
a2enmod modulename : enables the module named
The OSI
model of ISO modulename
Routing under
Linux ex : a2enmod libapache2-mod-php5 (enables php5 support
Diagnosing a
network
module in apache2)
problem
local diagnostics
remote After a module is enabled, it’s automatically copied from
diagnostics

Virtual
/etc/apache2/mods-available to /etc/apache2/mods-enabled
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA, a2ensite siteconfig : enables the site which config is siteconfig
Eric ATTOU
ex : a2ensite 001-ifri.conf (enables site 001-ifri.conf previously
Course
objectives
created under /etc/apache2/sites-available)
The OSI
model of ISO Once you’ve enabled a site, it’s automatically copied from
Routing under
Linux /etc/apache2/sites-available into /etc/apache2/sites-enabled
Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra- Apache main config file
tion : Linux
network ad- Apache2’s main configuration file is :
ministration
/etc/apache2/apache2.conf. Below are its principal directives :
Victor
OYETOLA,
Eric ATTOU
Directory blocks : defines a set of parameters applied to a given
Course directory containing pages to be served by the server ;
objectives
Here’s a sample directory block
The OSI
model of ISO < Directory /var/www >
Routing under
Linux Options Includes FollowSymlinks
Diagnosing a
network
AllowOverride All
problem
local diagnostics
DirectoryIndex index.php index.html index.htm
remote
diagnostics
< /Directory>
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
Configuring HTTP virtual sites
tion : Linux
network ad-
A virtual host appears as an additionnal identitiy (a new
ministration standalone web server)
Victor
OYETOLA,
Apache2 provides two ways to deploy virtual hosts :
Eric ATTOU
IP Address/port based virtual host : multiple IP addresses
Course are attributed to the server ;
objectives
Domain name based virtual host : One IP address with
The OSI
model of ISO multiple fqdn to the server. This latter configuration highly
Routing under
Linux suited the scarcity of IPv4 addresses.
Diagnosing a
network
Actually, Domain name based Vhosts config is supported by
problem recent implementation of the server. In fact, you’ll currently
local diagnostics
remote
diagnostics
have a default Vhost 000-default.conf in
Virtual /etc/apache2/sites-available
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
To create a new Vhost, create a new Vhost config file under
ministration /etc/apache2/sites-available
Victor
OYETOLA,
Eric ATTOU vhost config sample
Course
< VirtualHost * :80 >
objectives
ServerName www.ifri.net
The OSI
model of ISO ServerAlias ifri.net
Routing under
Linux DocumentRoot /var/www/ifriweb
Diagnosing a </VirtualHost>
network
problem
local diagnostics
remote
Enable your newly created vhost with a2ensite www.ifri.net
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux Apache vhost logs
network ad-
ministration By default, Apache2 stores all its vhosts logs into the same log
Victor file.
OYETOLA,
Eric ATTOU You could change this setting by defining CustomLog directive
Course
in each of the vhosts config file to change the log file format by
objectives
integrating the vhost the log is acquinted to.
The OSI
model of ISO Add a new LogFormat in
Routing under
Linux /etc/apache2/conf-available/customlog.conf
Diagnosing a Activate the new log config file with a2enconf customlog.
network
problem Delete or comment the CustomLog directive in
local diagnostics
remote /etc/apache2/sites-available/000-default.conf
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
Apache custom vhost logs
tion : Linux Here is an example of
network ad-
ministration /etc/apache2/conf-available/customlog.conf config file
Victor
OYETOLA,
Eric ATTOU
custom vhost log

Course
LogFormat ”%v %h %l %u %t
objectives ”%r
The OSI
model of ISO
” %>s %b
Routing under
Linux
”%Refereri
Diagnosing a ”
network
problem ”%User-Agenti
local diagnostics
remote
”” vhost
diagnostics
CustomLog /var/log/apache2/access.log vhost
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Diagnosing a network problem DHCP, DNS
Virtual Networking : VLAN and VPN Telnet, FTP, NFS
Network security HTTP
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
Dynamic HTTP config
ministration Historically, HTTP was designed to support static pages. So
Victor
OYETOLA,
far, it’s also stateless protocol. To actually make HTTP
Eric ATTOU support dynamic pages, you had to add either CGI module, or
Course activate server side scripting.
objectives
Many technologies or languages exist to deploy dynamic HTTP
The OSI
model of ISO infrastructure(HTTP+Server side scripting)
Routing under
Linux Apache2+php5
Diagnosing a Apache2+python
network
problem Apache2+perl
local diagnostics
remote
diagnostics
etc
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration A mail service focused on SMTP server. SMTP Simple Mail
Victor Transfer Protocol is the Internet standard for electronic
OYETOLA,
Eric ATTOU mail(email) transmission.
Speaking of SMTP, note that Mail Transfer Agent MTA uses
Course
objectives server acting as SMTP to transfer a message from a Mail User
The OSI
model of ISO
Agent MUA. Mail Submission Agent uses SMTP server to
Routing under
Linux
submit a mail to .
Diagnosing a By default, SMTP uses port 25, while SMTPS uses port 465
network
problem and mail submission uses port 587
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
Email is based on the use of message box. When a user wrote
network ad-
ministration
its mail, he transmits it to his MTA(Outgoing SMTP) this
Victor
MTA transmits the mail to another peer MTA and the message
OYETOLA,
Eric ATTOU
go step by step until it reaches the receiver’s MTA. Once the
message arrives on this latter MTA, a Mail Delivery Agent
Course
objectives MDA delivers it into the receiver’s message box.
The OSI Today, there’s two kind of MDA : POP, and IMAP
model of ISO
Routing under On Linux OS many implementation of each of the mail
Linux

Diagnosing a
protocols exists :
network SMTP : Exim4, Sendmail, Postfix ;
problem
local diagnostics POP : Pop3d, dovecot-pop3d ;
remote
diagnostics IMAP : uw-imapd, courrier-imapd, dovecot-core.
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system We will install postfix, dovecot-pop3d, dovecot-core,

and network
administra- dovecot-imapd
tion : Linux
network ad- apt-get install postfix, dovecot-pop3d, dovecot-core,
ministration
dovecot-imapd
Victor
OYETOLA, During the installation, debconf asks you some questions and
Eric ATTOU
uses your answers to define directives in the main postfix config
Course
objectives
file /etc/postfix/main.cf
The OSI
The First parameter debconf asks is the type of the mail
model of ISO server : you have to choose one of the following : Internet site,
Routing under
Linux
Internet site with smarthost etc.
Diagnosing a
network Secondly, you’re asked the hostname name of your server
problem
local diagnostics
(provide the fqdn)
remote
diagnostics Afterwards, you’ll be asked the domain names, your server will
Virtual be a MX for (list all your domains). You may also be asked the
Networking :
VLAN and addresses ranges which are allowed to send mail with this
VPN
SMTP. Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration
Below is a sample main.cf content
Victor
OYETOLA, main.cf
Eric ATTOU
#myorigin = /etc/mailname
Course
objectives
smtpd banner = $myhostname ESMTP $mail name
The OSI
(Debian/GNU)
model of ISO
Routing under
biff = no
Linux
append dot mydomain = no
Diagnosing a
network myhostname = mail.ifri.net
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad- main.cf
ministration

Victor
smtpd tls cert file=/etc/ssl/certs/ssl-cert-snakeoil.pem
OYETOLA,
Eric ATTOU
smtpd tls key file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd use tls=yes
Course
objectives mydestination = mail.ifri.net, ifri.net, localhost.localdomain,
The OSI localhost
model of ISO
Routing under
mynetworks = 127.0.0.0/8 [ : :ffff :127.0.0.0]/104 [ : :1]/128
Linux

Diagnosing a
192.168.0.0/16
network mailbox command = procmail -a ”$EXTENSION”
problem
local diagnostics inet interfaces = all
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration Virtual domains mailing Beyond the principal domains
Victor defined in mydestination parameter, your mail server may
OYETOLA,
Eric ATTOU handle mail to additionnal domains which users are not locally
known.
Course
objectives These domains are called Virtual domains. Postfix enables you
The OSI
model of ISO
to manage virtual domains mails. Note that virtual domains
Routing under
Linux
differ from Canonical domains declared with mydestination.
Diagnosing a Postfix offers two ways to define Vdomains : Aliases virtual
network
problem domains, Mail box virtual domains
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network Aliases Virtual mail domain
administra-
tion : Linux An alias virtual mail domain is a mail domain which doesn’t
network ad-
ministration really exist. But mail sent to users at that domain is actually
Victor
OYETOLA,
delivered to a real user existing in a mapped domain.
Eric ATTOU we require two parameters to define alias vmail domain :
Course
objectives alias vmail domain
The OSI virtual alias domains = ifri.net
model of ISO
Routing under virtual alias maps = hash :/etc/postfix/virtual
Linux

Diagnosing a
network Our mail server was setup to handle mail from ifri.bj. But here
problem
local diagnostics virtual alias domains asks the server to also handle mails
remote
diagnostics destinated to ifri.net. We’d now add mail addresses
Virtual
Networking :
correspondance in /etc/postfix/virtual
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor Aliases Virtual mail domain

OYETOLA,
Eric ATTOU
alias vmail domain
Course
objectives
webmaster@ifri.net pierre@ifri.bj
The OSI contact@ifri.net franck@ifri.bj, sophie@ifri.bj
model of ISO
Routing under
@ifri.net @ifri.bj
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network Mail box Virtual mail domain
administra-
tion : Linux Messages to mail box virtual mail addresses are stored into
network ad-
ministration
mailboxes that are not local to the server( the mailbox is not
Victor associated with a local user)
OYETOLA,
Eric ATTOU To activate mail box virtual mail we use :
Course mailbox vmail domain
objectives
virtual mailbox domains = ifri.org
The OSI
model of ISO virtual mailbox maps = hash :/etc/postfix/vmailbox
Routing under
Linux virtual mailbox base = /var/mail/vhosts
Diagnosing a
network
problem virtual mailbox domains : declares the mail box virtual domain
local diagnostics
remote virtual mailbox maps : declares mail box addresses mappings
diagnostics

Virtual
virtual mailbox base : defines the directory where the actual
Networking :
VLAN and
mailboxes will be stored
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
Mail box Virtual mail domain
tion : Linux
network ad-
Here again, mailbox maps (file /etc/postfix/vmailbox )format
ministration appears very simple.
Victor
OYETOLA,
Eric ATTOU
mailbox vmail domain
marc@ifri.org ifri.org/marc/
Course
objectives paul@ifri.org ifri.org/paul
The OSI
model of ISO
Routing under
Remark the two kinds of mapping definition
Linux
email addres =⇒ maildir : the email address is mapped with
Diagnosing a
network the directory name (with trailing /). Each mail is in its own file
problem
local diagnostics email addres =⇒ mailbox : the email address is mapped with
remote
diagnostics the mailbox. Here every mails are stored in a single mail where
Virtual
Networking :
individual mail start with From.
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA, SMTP access restrictions
Eric ATTOU
Once you’ve configure a mail server on the Internet, spammer
Course
objectives
must use it if you don’t implement a minimal access
The OSI
restrictions. Restrictions must be applied based on various
model of ISO
Routing under
criteria
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad- Restrictions with : smtpd client restrictions
ministration
smtpd client restrictions : helps you filters clients authorized
Victor
OYETOLA, to communicate with the server
Eric ATTOU
smtp client restrictions
Course
objectives smtpd client restrictions = permit mynetworks,
The OSI
model of ISO
warn if reject reject unknown client,
Routing under
Linux
check client access hash :/etc/postfix/access clientip,
Diagnosing a reject rbl client sbl-xbl.spamhaus.org,
network
problem reject rbl client list.dsbl.org
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
Check SMTP communication validity with HELO(EHLO)
network ad- Communication between any SMTP client and a SMTP server
ministration

Victor
start with a SMTP Helo request. The Helo request is followed
OYETOLA,
Eric ATTOU
by the client name to make the server check whether it’s a
valid SMTP client.
Course
objectives Ehlo based communication validity
The OSI
model of ISO smtpd helo restrictions = permit mynetworks,
Routing under
Linux reject invalid hostname,
Diagnosing a
network
check helo access hash :/etc/postfix/access helo,
problem reject non fqdn hostname,
local diagnostics
remote
diagnostics
warn if reject reject unknown hostname
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad- Sender based communication validity Each message is
ministration
associated with its sender announced by the field MAIL
Victor
OYETOLA, FROM. The following restrictions enable the server to
Eric ATTOU
accept/reject based on the content of this field.
Course
objectives Sender based restrictions
The OSI
model of ISO smtpd sender restrictions =
Routing under
Linux check sender access hash :/etc/postfix/access sender,
Diagnosing a reject unknown sender domain, reject unlisted sender,
network
problem reject non fqdn sender
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
Recipient based mailing control A mail usually contains one
OYETOLA,
Eric ATTOU
or more receivers defined in RCPT TO field.

Course
Receiver based restrictions
objectives
smtpd recipient restrictions = permit mynetworks,
The OSI
model of ISO reject unauth destination, reject unlisted recipient,
Routing under
Linux reject non fqdn recipient
Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA, Data based mailing control The actual message Data in an
Eric ATTOU
email starts with the DATA keywords.
Course
objectives Receiver based restrictions
The OSI
model of ISO smtpd data restrictions = reject unauth pipelining
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration
Filtering based on message content Postfix also provides a
Victor
OYETOLA, mean to filter based on message contents. This control checks
Eric ATTOU
the message header or its body
Course
objectives restrictions on message content
The OSI
model of ISO header checks = regexp :/etc/postfix/header checks
Routing under
Linux body checks = regexp :/etc/postfix/body checks
Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
Greylisting
tion : Linux
network ad-
Greylisting is a technic that consists in rejecting a message on
ministration the 1st hand and finally accept the message if the sender retry
Victor
OYETOLA,
(with a given timing between the two attempts)
Eric ATTOU Postfix does not offer this feature natively but you may add
Course postgrey package to implement it. Once you’ve installed
objectives
postgrey apt-get install postgrey, you’ve just to add the an
The OSI
model of ISO addition recipient restriction parameter check policy service
Routing under
Linux

Diagnosing a
Greylisting
network
problem smtpd recipient restrictions = permit mynetworks,
local diagnostics
remote
[...]
diagnostics
check policy service inet :127.0.0.1 :10023
Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux Integrating antivirus and mail filter
network ad-
ministration mail attachments frequently contains viruses. Mail servers are
Victor often configured with antivirus to fight system infection.
OYETOLA,
Eric ATTOU Clamav antivirus appears an effective tools to file viruses. In
Course
addition to clamav, you may use arj, unrar, unzoo, lha to
objectives
analyze archives with those formats. You also need an interface
The OSI
model of ISO (mail filter or shortly milter) between the mail server and the
Routing under
Linux antivirus.A milter is a message filtering program that acts as
Diagnosing a an interface with a mail service.
network
problem It’s also recommended that you install a spam filter
local diagnostics
remote spamassassin with its milter spamass-milter
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux Integrating antivirus
network ad-
ministration apt-get install clamav clamav-milter spamassassin
Victor spamass-milter
OYETOLA,
Eric ATTOU Afterwards, lunch dpkg-reconfigure clamav-milter. dpkg will
Course
ask you the communication port between the mail server and
objectives the filter. Enters inet :10002@127.0.0.1
The OSI
model of ISO
Now, enable the milter in main.cf
Routing under
Linux
enable milter
Diagnosing a
network # Virus check with clamav-milter smtpd milters =
problem
local diagnostics inet :[127.0.0.1] :10002
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Standalone clients
Eric ATTOU Standalone or desktop mail clients are applications installed on
Course workstation and used to collect mails. Each examples of such
objectives
applications are :
The OSI
model of ISO - mutt, mail which console mail reader application
Routing under
Linux - outlook, thunderbird, etc
Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU Webs client
Web mail clients are web applications used to read mails. Many
Course
objectives opensource software offers mail reading capabilities namely :
The OSI
model of ISO
roundcube, squirrelmail, horde, etc
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration LDAP Directory
Victor Lightweight Directory Access Protocol (LDAP)is a protocol
OYETOLA,
Eric ATTOU used to Organize hierachical data. LDAP is used to store : user
accounts, user groups, services, hosts, etc.
Course
objectives LDAP uses schemas to define objects structure. We’ll be using
The OSI
model of ISO
OpenLDAP server. To install it, issue :
Routing under
Linux
apt-get install slapd ldap-utils
Diagnosing a Now, reconfigure the server with slapd. Debconf will ask you
network
problem some questions in order to set a basic configuration.
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
LDAP Directory Interchange Format(LDIF)
OYETOLA,
Eric ATTOU
LDAP uses LDIF file to structure data, LDIF is a format used
for data extraction or integration to another directory.
Course
objectives By default, a minimal database informations is available with
The OSI the previous configuration. You can query the directory to view
model of ISO
Routing under the initial contents with :
Linux

Diagnosing a
$ldapsearch -x -b dc=ifri, dc=loc
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Virtual Networking : VLAN and VPN
pamd, SSH, LDAP, AAA
Network security
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system Using LDAP Directory as system user storage

and network
administra- Once you’ve properly configure your LDAP directory, you could
tion : Linux
network ad- setup your Linux system to use it for users, groups, services or
ministration
hosts backends.
Victor
OYETOLA, At this end, You require installing libnss-ldap to use LDAP as
Eric ATTOU
on of NSS backends.
Course
objectives
apt-get install libnss-ldap
The OSI
Edit /etc/nsswitch.conf and add ldap
model of ISO
Routing under
Linux
/etc/nsswitch.conf
Diagnosing a passwd : ldap compat
network
problem group : ldap compat
local diagnostics
remote
diagnostics
shadow : ldap compat
Virtual hosts : files dns ldap
Networking :
VLAN and
networks : ldap files
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
pamd, SSH, Mail, LDAP, AAA
Virtual Networking : VLAN and VPN
Network security
pamd, SSH, LDAP, AAA
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi
 Course objectives
The OSI model of ISO
Installing a mailing service
Diagnosing a network problem
mail clients : standalone client and web client
Samba, Webmin
Virtual Networking : VLAN and VPN
Network security
pamd, SSH, LDAP, AAA
Samba,Webmin
Networking services
Mailing service : mail, popd, imapd, webmail(roundcube, horde, squirrelmail)

Linux system
and network
administra-
tion : Linux
network ad-
ministration

Victor
OYETOLA,
Eric ATTOU

Course
objectives

The OSI
model of ISO
Routing under
Linux

Diagnosing a
network
problem
local diagnostics
remote
diagnostics

Virtual
Networking :
VLAN and
VPN
Victor OYETOLA, Eric ATTOU Linux system and network administration : Linux network admi