Introduction

E-Mail is one of the most widely-used communication methods today. This is especially true for modern business organizations. Microsoft's Exchange Server 2007 works well with Windows Server 2008 and provides the necessary infrastructure for organizations to host their own mail solution. With support for remote access, integration with Active Directory, Anti-Virus and Anti-Spam solutions, SSL, clustering, calendars, Push, voice messaging and much more, Exchange Server 2007 is an instant choice for a large number of administrators.

This document covers the installation process of Exchange, configuring users and mailboxes, and establishing a backup/disaster recovery plan.

Installation

Prerequisites

Before diving into the actual installation process, you'll need to make sure that you have Active Directory installed and you have ran DCPROMO from the command line. In addition, you'll need to run the following in the Command Prompt to ensure the required components are installed:

Introduction

As society grows, its technology requirements grow with it. The growth of technology means that we must begin to consider the security repercussions of the many servers on the internet. Bastille Linux is considered to be one of the most popular hardening tools for Linux, UNIX, and other operating systems. Bastille supports such Linux distributions as Debian, RedHat, Gentoo, Mandrake, SUSE and Fedora Core; and it can also be used on Mac OS X.

This document covers the installation and configuration process for Bastille on CentOS.

Installation

Prerequisites

Before proceeding, make sure you have the following dependencies installed:

• yum install perl-tk
• yum install perl-curses

Download and Installation

Now create a directory on your machine and download the Bastille RPM:

• mkdir /bastille
• cd /bastille
• wget http://iweb.dl.sourceforge.net/sourceforge/bastille-linux/Bastille-3.0.9-1.0.noarch.rpm
• rpm -ivh Bastille-3.0.9-1.0.noarch.rpm
• wget http://www.cipherdyne.com/psad/download/psad-1.4.6-1.i386.rpm
• rpm -ivh psad-1.4.6-1.i386.rpm
• wget ftp://ftp.univie.ac.at/systems/linux/dag/redhat/el4/en/i386/RPMS.dag/perl-Curses-1.12-1.2.el4.rf.i386.rpm
• rpm -ivh perl-Curses-1.12-1.2.el4.rf.i386.rpm

Introduction

A fairly important necessity for modern businesses and organizations to function efficiently today is the ability for them to centralize their resources into a single location. Microsoft Office SharePoint Server 2007 provides an integrated location where employees can collaborate with their co-workers, manage their documents, and gain training and corporate information about their workplace.

This document will cover the following:

• Installation process
• Configuration of 4 Sites
• • Documents Website
  • Wiki Website
  • Project Site
  • Task Site
• The Wiki Site will be accessible without authentication
• The Project Site will only be accessible by the MINDSTORM user group

Installation

It's a good idea to install SharePoint directly with SP1, instead of a creating a custom slipstreamed installation.

Introduction

VOIP (Voice over IP) is a fairly new technology. It enables broadband users to make calls over the Internet at virtually no cost. Popular services, such as Skype, offer this functionality for free and they’re easy to setup.
But what about the server-side of things? Surely you would need some sort of expensive software to setup your own VOIP server? Well, Asterisk is an open-source telephony solution that tries to solve this problem. Instead of having to use proprietary software, you can download Asterisk for free and set up your own VOIP server.

Preparation

Before starting, make sure you have a Linux machine available to use. Almost any distribution will do, but this scenario will use Fedora 9. You can also have an FQDN for your server, although it’s not required. All commands executed in this documentation will be done from the root account.

OS: Fedora 9
IP: 142.25.97.179
FQDN: amserver.andymdn.com

Tools and Libraries

To make sure installation goes smoothly, you’ll need to have some libraries before starting:

yum install gcc*
yum install openssl
yum install libtool

Download

Get the newest Asterisk source from the official website and extract it.

Introduction

The Internet’s primary use when it was first created was to exchange messages. Ever since, technology has made this process fast and easy thanks to e-mail. To send e-mail, of course, one would need a mail server first. Various e-mail services such as Gmail and Yahoo offer this for free, but what if you need to setup your own mail server for your organization?

There are numerous choices available, although one of them stands out in the crowd – because it’s free. Zimbra is an open-source browser-based e-mail server that’s quick and easy to setup. This document guides you through the installation process.

Preparation

Before we begin, we’ll need to make sure that the server is running a Linux distribution supported by Zimbra. Check the download page for more information:

http://www.zimbra.com/community/downloads.html

For this scenario we’ll be using a fresh installation of Fedora 7. You’ll also need to make sure that the server has a fully qualified domain name and an MX record for your mail server. Free DNS services such as ZoneEdit will allow you to do this.

OS: Fedora 7

mail.andymdn.com 142.25.97.242

andymdn.com 7200 IN MX 0 mail.andymdn.com

Keep in mind that DNS propagation and MX records can take up to 48 hours to take effect. You can use the dig command to check whether it’s done:

dig mx andymdn.com

Introduction

Apache is used on about 50% of today’s web servers. An increasing number of administrators are becoming familiar with this web server alternative not only because it’s free, but also due to the flexibility it provides. Setting up an Apache server is not as user-friendly as Microsoft’s IIS, unfortunately. This scenario covers advanced setup of virtual hosts on a single server machine with a wide variety of authentication methods.

Here are our requirements:

Site 1

• Is to be configured as a publicly (from internet or private network) accessible site
• Indexing of this site should be turned off
• The server should return a default page if no specific resource is requested

Site 2

• Is to be configured as a publicly accessible site, but with anonymous access
• Visitors to the site must login as ‘anonymous’ or ‘guest’ – otherwise access is to be denied. (No password is set for this user)
• Indexing of this site should be turned off. The server should return a default page if no specific resource is requested.

Site 3

• Is to be configured as a private site – accessible from the private network only. (ITAS Range works)
• Indexing of this site should be turned on
• The site should contain 2 directories: RegularFiles and ProtectedFiles, each with 2 – 3 text or html pages inside (Dummy content)
• Persons accessing this site should be able to enter either directory and see a list of files.
• Files in the RegularFiles directory should be viewable to all, but files in the ProtectedFiles directory should be restricted by password protection to a group of users.

Site 4

• Is a site you are hosting for a client; Configure this site so that the client can make changes to his/her web site without needing you to have restart the server. Hint: .htaccess
• Create a user account for this client so that they can log in (using sftp or SSH) to make changes to the appropriate file(s).
• Demonstrate this configuration by first setting the site up for unrestricted access – then have the client (logged in as him/herself – non-root) make the changes so as to require a username/password to access the site – without restarting Apache.
• The configuration file used to do this should be placed in the root of web space, but must not be accessible in any way via the web.

Site 6

• Is to be configured as an information site for your web administrators.
• Site will authenticate against a MySQL database table on the server hosting the site.
• Site to be accessible by username and password only when users password and username are equal to that of the database.
• Site will display three choices once logged in, a working copy of PhpMyAdmin, a working copy of Mambo content management system, and the latest Moodle beta

Introduction

This document outlines common tasks a Linux system administrator will need to do at some point. These include setting up a CUPS (printing) server, MySQL backups, LVM, and basic bash scripting. This guide should be compatible with Red Hat, Fedora and CentOS.

CUPS

CUPS stands for Common UNIX Printing System and was developed by Apple. It’s a modular printing system for UNIX operating systems that allows a machine to act as a print server. It provides a web interface for its backend, as well as the traditional configuration file. CUPS gives great control over print jobs, queues, and permissions.

Installation

Installing CUPS is pretty straight-forward. Yum install takes care of everything for us:

yum install cups

Once installed, you should be able to access the web interface. For this scenario, we’ll setup two printers and assign them to a class. Then, we’ll only allow three machines to use the print server.

Adding Printers

Navigate to the web interface using a browser by going to http://localhost:631/. You need to do this on the actual server machine.

1. Go to the Administration tab
2. Click Add Printer
3. Finish the wizard
4. Repeat Step 2

Now in the Administration tab:

1. Click Add Class
2. Give it a name
3. Highlight the printers you created in the Members box
4. Click Add Class

Introduction

Version control is a standard way of organizing collaborative projects today. Various software development companies use version control to share a codebase between a number of programmers and manage the changes that are made to it. Subversion is well-known in the open source community and is the most commonly used version control system. It builds upon the original CVS system, which is now starting to get outdated. This document will go over setting up an SVN server and Apache on a Linux (Fedora) machine and managing users.

Installing SVN

First, make sure you have all required components before proceeding. Install Apache, WebDAV, and Subversion.

SVN Server: 142.25.97.179
OS: Fedora 8

Prerequisites

To install the components, run:

yum install httpd mod_dav_svn subversion

This will install Apache, the WebDAV module for Apache, and Subversion.

Setting up SVN

You’ll need to create directories where the SVN files will reside.

mkdir /var/svn
mkdir /var/svn/repos
mkdir /var/svn/users
mkdir /var/svn/permissions

The repos folder is where the repositories will go. The users folder will contain the password file for authenticating users and the permissions folder will store the SVN authorization configuration file.

Now, let’s create some repositories:

Here are some common tasks you'll perform when dealing with Layer-3 ProCurve switches:

1. Locate the model of the Procurve from within the CLI, and what version of the IOS.
   
   

   ProCurve J4900B Switch 2626
   Firmware revision H.08.98
   
   
   
   

   
   
   
2. What would the command be
   to link‐test with your computer?
   
   

   link-test 001320890204
   
   
   
   

   
   
   
3. What is the syntax to ping 142.25.97.200 with 50 repetitions and a timeout of 20 seconds?
   
   

   ping 142.25.97.200 repetitions 50 timeout 20
   
   
   
   

   
   
   

Introduction

If you’re looking for a simple and powerful firewall solution, Endian is a great choice. It’s quick and easy to setup and so is administering it. It makes setting rules very easy thanks to its web interface and gives administrators full control over everything. It’s basically a front-end to IPTables (part of every Linux distro).

IPTables is the ultimate Linux firewall. It’s built straight into the kernel and allows for great flexibility when setting up rules and filtering. On the user space, IPTables provides a command-line interface that allows the administrator to set up rules and tables. The filtering itself is part of a module in the OS’s kernel. Filtering is based on predefined tables that check all network traffic that matches the set rules and acts accordingly.

Installing Endian

For this scenario, we’ll use a client that will be protected by the firewall and another machine for the firewall itself. First, obtain the latest Endian firewall ISO from:

http://www.endian.com/en/community/download/

1. Make sure your firewall machine has two NICs. This is a MUST for a firewall.
2. Burn the ISO and install it on your firewall machine.
3. Follow the setup instructions. When prompted for the GREEN IP address and subnet mask use these settings:
   

           IP:		10.0.0.1
           Subnet Mask:	255.255.0.0