Book Image

Linux Networking Cookbook

By : Agnello Dsouza, Gregory Boyce
5 (1)
Book Image

Linux Networking Cookbook

5 (1)
By: Agnello Dsouza, Gregory Boyce

Overview of this book

Linux can be configured as a networked workstation, a DNS server, a mail server, a firewall, a gateway router, and many other things. These are all part of administration tasks, hence network administration is one of the main tasks of Linux system administration. By knowing how to configure system network interfaces in a reliable and optimal manner, Linux administrators can deploy and configure several network services including file, web, mail, and servers while working in large enterprise environments. Starting with a simple Linux router that passes traffic between two private networks, you will see how to enable NAT on the router in order to allow Internet access from the network, and will also enable DHCP on the network to ease configuration of client systems. You will then move on to configuring your own DNS server on your local network using bind9 and tying it into your DHCP server to allow automatic configuration of local hostnames. You will then future enable your network by setting up IPv6 via tunnel providers. Moving on, we’ll configure Samba to centralize authentication for your network services; we will also configure Linux client to leverage it for authentication, and set up a RADIUS server that uses the directory server for authentication. Toward the end, you will have a network with a number of services running on it, and will implement monitoring in order to detect problems as they occur.

Related Content you might be interested in

Current Title:

Small book image
Linux Networking Cookbook
Agnello Dsouza | Gregory Boyce
Jun, 2016 | 152 pages
No titles found
Table of Contents (19 chapters)
Linux Networking Cookbook
Linux Networking Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Configuring a Router
Configuring a Router
Introduction
Setting up the physical network
Configuring IPv4
Configuring IPv4 permanently
Connecting two networks
Enabling NAT to the outside
Setting up DHCP
Setting up a firewall with IPtables
Setting up port forwarding
Adding VLAN Tagging
2
Configuring DNS
Configuring DNS
Introduction
Setting up your system to talk to a nameserver
Setting up a local recursive resolver
Configuring dynamic DNS on your local network
Setting up a nameserver for your public domain
Setting up a slave nameserver
3
Configuring IPv6
Configuring IPv6
Introduction
Setting up an IPv6 tunnel via Hurricane Electric
Using ip6tables to firewall your IPv6 traffic
Route an IPv6 netblock to your local network
4
Remote Access
Remote Access
Introduction
Installing OpenSSH
Using OpenSSH as a basic shell client
Using OpenSSH to forward defined ports
Using OpenSSH as a SOCKS proxy
Using OpenVPN
5
Web Servers
Web Servers
Introduction
Configuring Apache with TLS
Improving scaling with the Worker MPM
Setting up PHP using an Apache module
Securing your web applications using mod_security
Configuring NGINX with TLS
Setting up PHP in NGINX with FastCGI
6
Directory Services
Directory Services
Introduction
Configuring Samba as an Active Directory compatible directory service
Joining a Linux box to the domain
7
Setting up File Storage
Setting up File Storage
Introduction
Serving files with SMB/CIFS through Samba
Granting authenticated access
Setting up an NFS server
Configuring WebDAV through Apache
8
Setting up E-mail
Setting up E-mail
Introduction
Configuring Postfix to send and receive e-mail
Setting up DNS records for e-mail delivery
Configuring IMAP
Configuring authentication for outbound e-mail
Configuring Postfix to support TLS
Blocking spam with Greylisting
Filtering spam with SpamAssassin
9
Configuring XMPP
Configuring XMPP
Introduction
Installing ejabberd
Configuring DNS for XMPP
Configuring the Pidgin client
10
Monitoring Your Network
Monitoring Your Network
Introduction
Installing Nagios
Adding Nagios users
Adding Nagios hosts
Monitoring services
Defining commands
Monitoring via NRPE
Monitoring via SNMP
11
Mapping Your Network
Mapping Your Network
Introduction
Detecting systems on your network with NMAP
Detecting Systems Using Arp-Scan
Scanning TCP ports
Scanning UDP ports
Identifying services
Identifying operating systems
12
Watching Your Network
Watching Your Network
Introduction
Setting up centralized logging
Installing a Snort IDS
Managing your Snort rules
Managing Snort logging
Index
Index

Using ip6tables to firewall your IPv6 traffic

Firewalling IPv6 traffic on Linux is handled by the ip6tables command. This tool is the IPv6 version of the iptables command we've already used, and it operates in almost exactly the same manner. The big difference is that with IPv6 the use of NAT is highly discouraged.

How to do it…

Let's run the command to establish.

# ip6tables -6 -A INPUT -i lo -j ACCEPT 
# ip6tables -6 -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT 
# ip6tables -6 -A INPUT -p tcp --dport 22 -j ACCEPT
# ip6tables -6 -P INPUT DROP 
# ip6tables -6 -P FORWARD DROP
# ip6tables -6 -P OUTPUT ACCEPT
# ip6tables -6 -A FORWARD -i eth0 -j ACCEPT
# ip6tables -6 -A FORWARD -i eth1 -o eth0 -m \
state --state RELATED,ESTABLISHED -j ACCEPT
# ip6tables -6 -A FORWARD -i eth0 -j ACCEPT

How it works…

The ip6table rules here are identical to the iptables rules in Chapter 1, Configuring a Router with a few exceptions:

  • A lack of NAT

  • -6 options

NAT was initially created to deal with the problem...

Previous Section
End of Section 4
Next Section