Section I: System Performance and Security
- Concepts and Practices
- System Faults and Breaches
- Method of Fault Analysis
- Benefits of System Monitoring
- Managing Processes by Account
- Hands-on lab: System Monitoring
Section II: System Service Access Controls
- Service and Network Access Controls
- System Initialization and Service Management
- Service and Application Access Controls
- tcp_wrappers Configuration
- Security Enhanced Linux (SELinux)
- Hands-on Lab: Controlling access to certain hosts
Section III: Network Resource Access Controls
- Internet Protocol and Routing
- IPv6: Dynamic Interface Configuration
- IPv6: StaticInterface Configuration
- IPv6: Routing Configuration
- Netfilter Overview
- Rules: General Considerations
- Connection Tracking
- Network Address Translation (NAT)
- IPv6 and ip6tables
- Hands-on Lab: Securing Networking
Section IV: Organizing Networked Systems
- Host Name Resolution
- DNS-Specific Resolvers
- Trace a DNS Query with dig
- Exploring DNS with host
- Service Profile: DNS
- Getting Started with BIND
- bind-chroot Package
- caching-nameserver Package
- Remote Name Daemon Control (rndc)
- The DHCP Service
- DHCP Overview
- Configuring an IPv4 DHCP Server
- Hands-on Lab: Implement a Minimal DNS Server
Section V: Network File Sharing Services
- File Transfer Protocol (FTP)
- Network File Service (NFS)
- Port options for the Firewall
- Samba services
- Configuring Samba
- Hands-on Lab: Network File Sharing Services
Section VI: Web Services
- Apache Overview
- Apache Server Configuration
- Virtual Hosts
- Apache Access Configuration
- CGI
- Apache Encrypted Web Server
- Squid Web Proxy Cache
- Hands-on Lab: Implementing Web (HTTP) Services
Section VII: Electronic Mail Services
- Essential Email Operation
- Simple Mail Transport Protocol
- Sendmail SMTP Restrictions
- Sendmail Operation
- Using alternatives to Switch MTAs
- Postfix Configuration
- Postfix SMTP Restrictions
- Postfix Operation
- Mail Retrieval Protocols
- Hands-on Lab: Electronic Mail
Section VIII: Securing Data
- The Need For Encryption
- Symmetric Encryption
- Asymmetric Encryption
- Public Key Infrastructures
- Digital Certificates
- Hands-on Lab: Securing Data
Section IX: Account Management
- Account Management
- Account Information (Name Service)
- Name Service Switch (NSS)
- Pluggable Authentication Modules (PAM)
- PAM Operation
- Utilities and Authentication
- Hands-on Lab: Account Management Methods
|