Configuring Linux Server and its Security Maintenance.pptx

CONFIGURING LINUX SERVER
AND SECURITY MAINTENANCE
Salehin Nirbhoy
Royal University of Dhaka.

• History of Linux
1
• Linux Distribution
2
• Install Ubuntu Server
Edition 12.04.x LTS
3
Today’s Overview
Copyright © 2014 Salehin Yazuz Nirbhou |

• Basic LAN Configure in
Server
4
• Start Ubuntu 13.10
Desktop PC
5
• Internet Gateway Server
6
Today’s Overview

• Configuring DNS Server
7
• Enable Firewall Security
8
• Configure Squid
(Proxy Server)
9
Today’s Overview

• SARG Proxy Report
10
• Install samba Server
11
Today’s Overview

History of Linux
• Linus Torvalds, who was then a student at the University of
Helsinki in Finland, developed Linux in 1991. He released it for free
on the Internet. Due to the far reach of the Free Software
Foundation (FSF) and the GNU Project, Linux popularity increased
rapidly, with utilities developed and released for free online. A
commercial version of Unix was released by RedHat in the early
1990’s (combining the OS with technical support and
documentation) and the popularity of Linux continued to
skyrocket.
• A system is termed UNIX only if it complies fully with (and is
certified by) the Single Unix Specification (SUS) standards. Similar
systems that do not comply fully or are not certified, such as
Linux, are termed “Unix-like” operating systems.

Linux Distribution
• A Linux distribution is a collection of software applications built on top of the Linux kernel
and operating system. There are many variations between distributions, as each strives to
provide a unique user experience.

Choses My Distribution

Install Ubuntu Server Edition 12.04.x LTS

Select Server

Define SWAP Memory

Bsic LAN Configure

Put IP Address on the Interface and dns address

Real IP (Provided By ISP)

Local IP (Provided By Client)

Network Restart

Set DNS

Restart DNS

Check eth (Ethernet) IP

Check DNS Address (nslookup royal.edu.bd)

Check Internet Connection (ping yahoo.com)

apt-get update

apt-get upgrade

Start Ubuntu 13.10 Desktop PC

Login

Client PC Root Login

Configure Client IP (Ubuntu Desktop)

Ping Server Machine (ping 192.168.10.140)

Configuring Linux Server

Internet Gateway Server
Login with putty (172.30.1.111)

Install package of requerment
apt-get -q –y install rcconf vimnox iftop htop iptables

Open nat_firewall.sh
vim /usr/bin/nat_firewall.sh

Configure of nat_firewall.sh
POSTROUTING -> 192.168.10.0/24 & source -> 172.30.1.111

Permission File to Executable
chmod 755 /usr/bin/nat_firewall.sh

Add the following line before exit 0
/usr/bin/nat_firewall.sh

Run nat_firewall.sh file
root@rud:~# /usr/bin/nat_firewall.sh

echo '1' ip_forward
echo '1' > /proc/sys/net/ipv4/ip_forward

Check NAT
root@rud:~# Iptablels -nvL

Active Internet Access to Client PC
Add gateway 192.168.10.1

Check ping Reply
root@rud:~# ping royal.edu.bd

Blousing WEB Page

Configuring DNS Server
root@rud:~# apt-get install daemontools daemontools-run ucspi-tcp dbndns dnsutils

DNS Log User Create
root@rud:~# adduser --no-create-home --disabled-login --shell /bin/false dnslog

Dnscache User Create
root@rud:~# adduser --no-create-home --disabled-login --shell /bin/false dnscache

Set IP Address
root@rud:~# dnscache-conf dnscache dnslog /etc/dnscache 192.168.15.1

Open dnscache Directory
root@rud:~# cd /etc/dnscache

Create Network ID of Real IP file
root@rud:~# touch /etc/dnscache/root/ip/172.30.1

Create Local Host File
root@rud:~# touch /etc/dnscache/root/ip/192.168.10

Create Defult Network ID IP File
root@rud:~# touch /etc/dnscache/root/ip/127.0.0.1

Service Work
root@rud:~# cd /etc/service
root@rud:~# ln -sf /etc/dnscache/
root@rud:~# mkdir /service
root@rud:~# cd /service
root@rud:~# ln -sf /etc/dnscache/

Some Service Restart
root@rud:~# initctl stop svscan
root@rud:~# initctl start svscan
root@rud:~# initctl restart svscan

10. Print cashadns Byte Size
root@rud:~# echo "10000000" > CACHESIZE
root@rud:~# echo "30000000" > DATALIMIT

Show My Dns IP
root@rud:~# nslookup roual.edu.bd

Restart & reload service
root@rud:~# svc -t /service/dnscache
root@rud:~# svc -h /service/dnscache

Checking status
root@rud:~# svstat /etc/dnscache

Shutting & Starting Up dnscache
root@rud:~# svc -d /etc/dnscache
root@rud:~# svc -u /etc/dnscache

Set New DNS IP Address in Server
root@rud:~# vim /etc/resolvconf/resolv.conf.d/head

Set New DNS Addres in Client PC
root@rud:~# vim /etc/resolvconf/resolv.conf.d/head

Show Client PC DNS
root@rud:~# nslookup royal.edu.bd

Enable Firewall Security
root@rud:~# vim /usr/bin/nat_firewall.sh

Drop Gateway IP Serice
Drop 192.168.10.0/24 IP

Run The nat_firewall.sh File
root@rud:~# /usr/bin/nat_firewall.sh

Ping Client Internet

Brousing (Not Access)

Find MAC Address
root@rud:~# arp 192.168.10.130

To Access Client PC

Successfully Reply

Successfully Browsing WEB Page

Configure Squid (Proxy Server)
apt-get package install
vim-nox iftop htop build-essential vnstat dnsutils telnet rcconf dialog unzip unrar
locate rsync

apt-get install squid3 privoxy

CP & Blank Sqide
# cp /etc/squid3/squid.conf /etc/squid3/squid.conf.original

Open sqide.conf file
# vim /etc/squid3/squid.conf

Configure squide

Save Configure squide

If any error check and resolve
# squid3 -k parse

Create access.log file
# touch /var/log/squid3/access.log

Create cache.log file
# touch /var/log/squid3/cache.log

Run squid
# squid3 -z

Restarting proxy server
# service squid3 stop
# service squid3 start
# service privoxy restart

Configure a line in sh nat_firewal file

Run nat_firrwall.sh file
# /usr/bin/nat_firewall.sh

Enable Firewall Security
root@rud:~#

Visit Client Blouser

Show proxy server web link
# tail –f /var/logsquid3/access.log

SARG Proxy Report
root@rud:~# apt-get install sarg apache2 php5

Open sarg.conf file
root@rud:~# vim /etc/sarg/sarg.conf

Configure sarg.con
access_log /var/log/squid3/access.log
title "Squid User Access Reports"
output_dir /var/www/squid-reports

Make rudreport directory
root@rud:~# mkdir /var/www/rud-reports

Open sarg.sh file
root@rud:~# vim /usr/bin/sarg.sh

Open sarg_ini.sh
root@rud:~# vim /usr/bin/sarg_ini.sh

Configure sarg_ini.sh
#!/bin/bash
# TEMP FilesTMPFILE=/tmp/sarg-reports.$RANDOM
ERRORS="${TMPFILE}.errors“
/usr/bin/sarg -f /etc/sarg/sarg.conf

Executable Permission of sarg.sh
# chmod 755 /usr/bin/sarg.sh

Run sarg.sh
root@rud:~# /usr/bin/sarg.sh

Blousing Report of local host

Blousing Report of localhost

Install samba Server
root@rud:~# apt-grt install samba

Create RUD Share Folder
root@rud:~# mkdir –m 0777 /rud

samba conf file
root@rud:~# vi /etcsamba/smb.conf

samba smb.conf file

Configuring samba

SAMBA Server Restart
root@rud:~# service smb restart

THANKS' ALL

Configuring Linux Server and its Security Maintenance.pptx

Recommended

Recommended

More Related Content

Similar to Configuring Linux Server and its Security Maintenance.pptx

Similar to Configuring Linux Server and its Security Maintenance.pptx (20)

Recently uploaded

Recently uploaded (20)

Configuring Linux Server and its Security Maintenance.pptx