Book Image

Network Administration with FreeBSD 7

By : Babak Farrokhi
Book Image

Network Administration with FreeBSD 7

By: Babak Farrokhi

Overview of this book

<p>This book is a guide to FreeBSD for network administrators; therefore it does not cover basic installation and configuration of FreeBSD, but is about using FreeBSD to build, secure, and maintain networks.<br /><br />After introducing the basic tools for monitoring the performance and security of the system the book moves on to cover using jails&acirc;&euro;&rdquo;FreeBSD virtual environments&acirc;&euro;&rdquo;to virtually run multiple instances of FreeBSD on the same hardware. Then it shows how to overcome the different bottlenecks that you may meet depending on the services you are running by tweaking different parameters to maintain a high performance from your FreeBSD server. Next it covers using the ifconfig utility to configure interfaces with different layer protocols and about connectivity testing and debugging tools. After covering using User PPP or Kernel PPP for Point-to-Point Protocol network configuration it explains basic IP forwarding in FreeBSD and the use of the built-in routing daemons, routed and route6d, which support RIPv1, RIPv2, RIPng, and RDISC. Next it covers the OpenOSPFD and OpenBGPD daemons that you can install to run OSPF and BGP on your host. Then it covers setup and configuration of IPFW and PF, and finally looks at some important internet services and how to set them up on your FreeBSD server.</p>

Related Content you might be interested in

Current Title:

Small book image
Network Administration with FreeBSD 7
Babak Farrokhi
Apr, 2008 | 280 pages
No titles found
Table of Contents (19 chapters)
Network Administration with FreeBSD 7
Network Administration with FreeBSD 7
Credits
Credits
About the Author
About the Author
About the Reviewer
About the Reviewer
Preface
Preface
Free Chapter
1
System Configuration—Disks
System Configuration—Disks
Partition Layout and Sizes
Swap
Softupdates
Snapshots
Quotas
File System Backup
RAID-GEOM Framework
Summary
2
System Configuration—Keeping it Updated
System Configuration—Keeping it Updated
CVSup—Synchronizing the Source Code
Ports Collection
Security Advisories
Customizing and Rebuilding Kernel
Rebuilding World
Binary Update
Recovering from a Dead Kernel
Summary
3
System Configuration—Software Package Management
System Configuration—Software Package Management
Ports and Packages
Package Management Tools
Summary
4
System Configuration—System Management
System Configuration—System Management
Process Management and Control
Summary
5
System Configuration—Jails
System Configuration—Jails
Concept
Introduction
Setting Up a Jail
Configuring the Host System
Starting the Jail
Automatic Startup
Shutting Down Jails
Managing Jails
Jail Security
Jail Limitations
Summary
6
System Configuration—Tuning Performance
System Configuration—Tuning Performance
Tweaking Kernel Variables using SYSCTL
Kernel
Disk
Network
The /etc/make.conf file
The /boot/loader.conf file
Summary
7
Network Configuration—Basics
Network Configuration—Basics
Ifconfig Utility
Default Routing
Name Resolution
Network Testing Tools
Summary
8
Network Configuration—Tunneling
Network Configuration—Tunneling
Generic Routing Encapsulation (GRE) protocol
IPSEC
Summary
9
Network Configuration—PPP
Network Configuration—PPP
Setting up PPP Client
Setting up PPP Server
Setting up PPPoE Client
Setting up PPPoE Server
Summary
10
Network Configuration—Routing and Bridging
Network Configuration—Routing and Bridging
Basic Routing—IP Forwarding
Static Routing
routed and route6d
Running OSPF—OpenOSPFD
Running BGP—OpenBGPD
Bridging
Proxy ARP
Summary
11
Network Configuration—IPv6
Network Configuration—IPv6
IPv6 Facts
Using IPv6
Routing IPv6
RIP6
Multicast Routing
Tunneling
Summary
12
Network Configuration—Firewalls
Network Configuration—Firewalls
Packet Filtering with IPFW
Packet Filtering with PF
Network Address Translation using PF and IPFW
Summary
13
Network Services—Internet Servers
Network Services—Internet Servers
inetd Daemon
SSH
NTP
DNS
FTP
Mail
Web
Proxy
Summary
14
Network Services—Local Network Services
Network Services—Local Network Services
Dynamic Host Configuration Protocol (DHCP)
Trivial File Transfer Protocol (TFTP)
Network File System (NFS)
Server Message Block (SMB) or CIFS
Simple Network Management Protocol (SNMP)
Printing
Network Information System (NIS)
Summary

IPSEC

FreeBSD's IPSec stack is based on IPSec implementation from the KAME project (see http://www.kame.net). The IPSec feature is not available in stock GENERIC kernel and a new customized kernel should be built with the following options added to the kernel configuration file:

options IPSEC
options IPSEC_ESP

Once you reboot your host with the customized kernel, the IPSec protocol is available for implementation.

FreeBSD's IPSec implementation supports both Authenticated Header (AH) and Encapsulated Security Payload (ESP) protocols, which can be used either together, or separately.

The AH protocol protects the packets to be modified on their way to their destination, by cryptographically hashing the IP header. Consequently, when a packet is modified by an attacker in a man-in-the-middle scenario, this will be easily detected and discarded by the receiving host. AH does not encrypt the actual packet payload and is not protected against sniffing and wiretapping.

On the other hand, ESP offers...

Previous Section
End of Section 3
Next Section