Debian5从入门到精通 LinuxCBT Deb5x Edition [光盘镜像]

游客，本帖隐藏的内容需要积分高于 1 才可浏览，您当前积分为 0

资源信息： 中文名: Debian5从入门到精通 英文名: LinuxCBT Deb5x Edition 资源格式: 光盘镜像 主讲人: Dean Davis 蒂恩*戴维斯 发行日期: 2010年04月05日 地区: 美国 对白语言: 英语 文字语言: 英文 概述:

LinuxCBT - Deb5x Edition LinuxCBT - Deb5x Edition | ISO | 2.82 GB Genre: eLearning LinuxCBT Deb5x版本专注于开源操作系统Debian linux 5版本操作系统教学。Linux CBT Debian5x版本假设你和你的公司正展开部署商业级别 linux服务器解决方案。 就让LinuxCBT Deb5x版本来教你其他cbt教学版本不能教你的--坚实的GNU/Linux技巧！ LinuxCBT Deb5x Edition focuses primarily on the open-source Debian Linux 5 operating system. LinuxCBT Deb5x Edition prepares you or your organization for successfully deploying and managing business-critical Debian GNU/Linux-based server solutions. Let LinuxCBT Deb5x Edition teach you what traditional training outlets and other CBTs do not; solid Debian GNU/Linux skills! 建议及要求： × 开放的思想以及期望精通linux以及相关应用程序的热情。 ×基本的微软视窗操作系统使用技能。 ×需要理解基本网络概念。 ×需要一台空闲的计算机来安装debian与完成课程有关的练习 Recommended Prerequisites: * Open mind & determination to master Linux and related open-source applications * Basic MS Windows skills * Basic understanding of networking concepts * Access to a spare PC to perform all of the installations and exercises

目录: Content 目录 # Introduction to & Installation of Debian GNU/Linux 介绍和安装Debian GNU/Linux * Install Debian Linux Using Various Methods 用多种方式来安装debian o Explore network layout 浏览网络拓扑布局 o Identify Debian GNU/Linux distribution sites 介绍DEbian GNU/Linux发布网站 o Explain various methods of obtaining Debian GNU/Linux 介绍多种方式获取Debian GNU/Linux o Explain the various branches 介绍debian的多种分支 o Prep the Intel-based system for a minimal installation 准备intel构架的最小安装 o Install Debian Linux on x86 machine using local media and the Internet 使用本地媒体介质和internet来在x86构架的计算机上安装debian linux o Install Debian Linux on Intel-based x86 machine using CD-ROMs o Configure the installation process with Server-oriented packages o Prep the Intel-based system for a PXE network installation o Identify Network Installation ISO Image repositories o Configure the installation process with Server-oriented packages o Prepare VMWare host server o Install Debian GNU/Linux on VMWare Server * # Debian GNU/Linux Fundamentals * Explore Linux boot sequence * Explore Debian GNU/Linux GNOME Desktop Interface & Default Applications * Basic Debian GNU/Linux Skills * Demonstrate usage of the following useful commands & concepts o ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami, man, info o alias, cat, file, chmod, chown, history o Standard in/out, UNIX Pipes, Redirection, Command Chaining o ps, df, free, vmstat, top, kill o less & more, head & tail, find o which & whereis, w, who o PING (Packet Internet Groper) o dig (Domain Information Groper) – used to query DNS servers o Demonstrate typical usage of the vi text editor o Demonstrate typical usage the nano text editor o Tarball Archiving & compression of files & directories with tar|gzip|bzip2|unzip o Explain UNIX/Linux file security & permissions (-rwxrwxrwx) o Use mount/umount to access CD-ROM and floppy devices o Explore /etc/fstab (File system Table file) o Explore TCP/IP Configuration o Explore Wget and demonstrate its typical usage to interface to HTTP/FTP servers o Explore GNU: GREP | Awk | Sed * * Advanced Package Management Tool (APT) Concepts o Explain classes of Debian GNU/Linux Packages o Identify Debian GNU/Linux Package Management Tools o Inventory currently installed DEB packages o Identify key Advanced Package Tool (APT) configuration files o Search for Debian GNU/Linux packages using Advanced Package Tool (APT) o Install/Update/Remove software using APT o Configure APT to query multiple sources for packages o Use DPKG to install a DEB package located on an EXT3 File System o Configure APT to install packages from varying versions of Debian GNU/Linux o Use Aptitude to manage Debian GNU/Linux packages o Install Apt-Spy using APT to identify optimal mirrors * * Disk & Volume Management o Provision additional Storage partitions using FDISK o Use MKE2FS to provision multiple EXT2 & EXT3 File Systems o Provision additional Storage partitions using Parted o Provision additional Swap storage o Use MKSWAP & SWAPON to enable additional Swap storage o Update File System Table (FSTAB) to reflect system changes o Explore Logical Volume Management (LVM) Configuration o Create volume sets using: Logical Volume Management (LVM) * * Package Management o Discuss various package management options o Explore package management repositories o Use DPKG to install a .deb package o Install packages using ‘apt-get’ o Manage packages using ‘aptitude’ * * INIT o Explain Debian GNU/Linux System V Init Runlevel (0 – 6) concepts & applications o Explore INIT configuration o Identify key startup files, including scripts (inittab,Sscripts,Kscripts,etc.) o Switch between run levels and evaluate o Demonstrate using SSH to authenticate to remote Linux hosts without passwords o * * Explore the CRON scheduling daemon & configuration o Identify key Cron configuration scopes (Global & User) o Explain Crontab file format and applicable options o Define custom cron jobs system-wide o Define custom cron jobs user-wide o Evaluate results of cron jobs * # # top # Core Network Services * System Logging via Syslog, Syslog-NG and Logrotate o Explanation of syslog facilities & levels o Demonstrate syslog administration o Demonstrate Cisco to Linux SYSLOG functionality o Migrate system to Syslog-NG o Discuss Syslog-NG features and benefits o Explore automatic log rotation and customization via Logrotate o Configure Logrotate to rotate & compress sample log files * * IPv4 & IPv6 Configuration o Identify key files for the transition from DHCP to Static addressing o Configure Linux client with static TCP/IP parameters for network communication o Configure Virtual (Sub) Ethernet Interfaces to faciliate multiple IP addresses o Explain IPv6 addresses (prefixes) o Explore IPv6 configuration on Linux and Cisco router * * Implement Network Time Protocol (NTP) Client/Server o Configure Network Time Protocol (NTP) to perform client/server time synchronization o Identify NTP bounded UDP interfaces o Synchronize Debian GNU/Linux NTP with RedHat Linux Stratum 2 NTP server o Configure RedHat Linux NTP server to synchronize with Debian GNU/Linux server * * Trivial File Transfer Protocol Daemon (TFTPD) o Discuss features and benefits o Explore TFTPD configuration o Backup Cisco router and firewall configuration using TFTPD o Evaluate results * * Very Secure File Transfer Protocol Daemon (VSFTPD) & LFTP Client o Discuss features and benefits o Explore configuration o Test FTP connectivity o Explore LFTP client features o Evaluate results * * Telnet Daemon (TELNETD) for temporary clear-text shell communications o Discuss features and benefits o Install TELNETD using Aptitude o Explore configuration and usage o Examine Message of the day banners (MOTD), /etc/issue file (pre-login banner/display info.) * * Commonly-used Network Utilities o NETSTAT o Traceroute & MTR (PING & Traceroute functionality) o ARP o IFCONFIG o Route o DIG & NSLOOKUP o Whois * * Dynamic Host Configuration Protocol (DHCP) services o Explain the various steps of the DHCP process o Configure global & scope-level DHCP options o Configure IP reservations based on layer 2 MAC addresses o Enable Linux DHCP services o Configure Windows/Linux clients to receive dynamic addresses from Linux o Examine evidence of clients requesting addresses from DHCPD * * Implement the Berkeley Internet Naming Daemon (BIND) Domain Name Server (DNS) o Implement BIND 9.x o Configure BIND as a caching-only DNS server o Test caching-only name resolution from Linux hosts o Configure Linux/Windows 2003 clients to use Linux BIND DNS server o Configure BIND as an Authoritative DNS server o Test primary name resolution from Windows & Linux hosts o Configure BIND as a secondary(slave) DNS server o Evaluate results of BIND configuration using DIG o Configure DNS zones o Configure zone transfers o Evaluate BIND’s configuration files o Implement IPv6 DNS AAAA records & evaluate forward IPv6 name resolution o Implement IPv6 DNS reverse records & evaluate reverse IPv6 name resolution * * Network File System (NFS) o Discuss features and benefits o Explore NFS configuration o Test NFS on clients and servers * * Implement Linux & Windows Integration via Samba o Implement SMBFS integration with Debian GNU/Linux File System o Mount Windows shares seamlessly using Samba File System (SMBFS) o Configure FSTAB to support repetitive mounts o Implement secure SMBFS credentials for mounting o Install Samba Server support o Install Samba Web-based Administration Tool (SWAT) o Configure Samba file sharing o Configure Samba with multiple NETBIOS aliases o Configure Samba Windows Internet Name Server (WINS) support o Evaluate Windows XP client access to Debian GNU/Linux Samba server * # top # Application Services – Linux|Apache|MySQL|PHP (LAMP) * Web Application Services o Implement Apache Web Server o Examine httpd.conf file directives o Implement virtual directories using Apache and symbollic links o Implement Redirects using Locate and various Apache directives o Configure virtual hosts bound to the primary IP address and port o Configure virtual hosts bound to alternate virtual IP addresses and ports o Implement Apache logging system per virtual host o Configure basic authentication to virtual hosts containers via Directory directives o Configure digest authentication o Implementation of Webalizer Log Analysis software o Generate web reports using Webalizer o Implementation of PHP Dynamic Web Access Scripting Engine + Evaluate PHP Dynamic Web Access Scripting Engine installation results + Test basic PHP script-processing using sample scripts o * * MySQL Relational Database Management System o Install MySQL Relational Database Management System o Secure access to MySQL o Create sample MySQL databases o Install PHPMyAdmin for web-based management of MySQL instances o Explain & Secure access to PHPMyAdmin o Explore PHPMyAdmin’s interface * * Postfix MTA o Install Postfix MTA o Introduction to Postfix Message Transfer Agent (MTA) o Use Mutt to demonstrate outbound mail handling using Postfix o Explore Postfix Configuration * * Post Office Protocol Version 3 (POP3) o Explain POP3 concepts and applications o Implement POP3 daemon o Connect to POP3 daemon using Windows Outlook Express client o Use Mutt to send SMTP-based messages to POP3 account * * Internet Messaging Access Protocol (IMAP) o Explain IMAP concepts and applications in comparison to POP3 o Implement IMAP services o Connect to IMAP services from remote Windows Outlook Express client * * Web-based Mail Implementation using Squirrel-mail o Describe required squirrel mail components for web-mail integration o Install squirrel mail on Debian GNU/Linux system o Configure Apache virtual directory for squirrel mail integration o Configure Apache Virtual Host for squirrel mail integration o Configure BIND DNS services for squirrel mail integration o Explore squirrel mail’s web-based interface * # # top # Security Implementation Techniques * IPTABLES (Netfilter Linux Kernel-based Firewall) o Discuss IPTABLES/Netfilter Concepts o Explain IPTABLES default chains/filters and policies o Examine TCP/ICMP communications pre-IPTABLES chains o Implement ICMP inbound filtration based on various hosts o Use Cisco PIX Firewall to verify ICMP debugging o Filter traffic based on Layer-4 TCP/UDP (Source/Destination Ports) information o Restrict access to various daemons (SSH/FTP/HTTP/etc.) o Test connectivity locally and remotely (RedHat/Windows/etc.) * * Network Mapper (NMAP) o Obtain, compile and install current version of NMAP o Identify commonly used NMAP options/switches/parameters o Perform default TCP SYN-based ethical scans of local and remote resources o Explain typical TCP handshake protocol while using NMAP o Examine the results of scans on remote Cisco firewall with debugging mode enabled o Perform default TCP Connect-based ethical scans of local and remote resources o Examine the results of scans on remote Cisco PIX Firewall with debugging mode enabled o Use NMAP to scan using aliased and spoofed IP addresses o Peform local ethical scans o Identifiy key NMAP configuration files o Use NMAP to perform operating system fingerprinting o Peform subnet-wide ethical scans * * Lockdown (Debian GNU/Linux System Lockdown) o Explain potential network-based entry points to the system o Identify superfluous daemons/services using NETSTAT & NMAP o Disable superfluous daemons/services using update-rc.d and proper scripts o Identify changes in the system as a result of performing the lockdown o Disable superfluous daemons/services using XINETD o Restrict source address access to daemons/services using XINETD o Restrict bind address for daemons/services using XINETD o Discuss application-layer security for added protection (MySQL/Apache/SSH) o Force SSHD to bind to desired layer-3 IP address for controlled security o Secure the system using IPTABLE for added security * * TCPDump & Wireshark o Discuss features and benefits o Explore TCPDump usage o Capture interesting traffic o Analyze with Wireshark