LAB 20: Samba Share – Write Only Now we will share the students folder. cd /data vi /etc/samba/smb.conf :set nu Copy entire block to the end :290,294t294 Modify the block as follows: [students] comments = exchange information path = /data/students public = no (disallow guests access) valid users = +students (group students) writeable =… Read more CentOS – Write Only Shares (PART 20)
Lab 19: SBM ReadOnly Share This lab will show how to configure shares on a Linux server. Suppose on Linux server, we have the following directories: Software Everyone can READ ONLY Students Only Students (St1, St2,…) can READ ONLY Teachers Only Teachers (T1, T2) have FULL ACCESS Exercises Teachers have FULL ACCESS Students (St1, St2,…) can… Read more CentOS – SMB ReadOnly Shares (PART 19)
Lab 18: Integrating Samba and WINS On the DC2012 install WINS (Windows Internet Name Service) component. This is a Feature on Server 2012 R2. Launch Network Connections by entering this command: ncpa.cpl Change WINS server IP address to point to itself: 10.0.0.11. On Linux Samba server: configure WINS to point to the DC2012 server. vi… Read more CentOS – Integrating Samba and WINS (PART 18)
Lab 17: Linux Client access Windows Share On the server DC2012, create a folder and share it. On a Linux client machine, enter the following command: smbclient –U Administrator –L DC2012 You should see that share folder. 1/ Procedures On DC2012 create a new folder called DuLieu, place some random files in it and share… Read more CentOS – Linux Client Accessing Windows Shares (PART 17)
Lab 16: Samba The DNS system is on the Linux server and NOT on the Domain Controller. In this lab, we present another server called DC2012 and it is promoted to be a Domain Controller. 1/ Samba SAMBA supports file, print sharing, and using SMB protocol (IBM) Samba use these protocols – smbd = TCP… Read more CentOS – Samba Service (PART 16)
Lab 15: Firewall and Squid Proxy Squid = fast but less secure. iptables = slower but secure Our goal is to combine the best of both worlds. Because all clients inside LAN go through the firewall, we need to redirect HTTP traffic to squid. 1/ Make sure the port for Proxy is 8080 vi /etc/squid/squid.conf… Read more CentOS – Firewall and Squid Proxy (PART 15)
Lab 14: Inbound NAT Allows Internet users to access Internal LAN server (for example, publishing mail server). For example, a user on the internet accesss public IP port 80, the web site will show up. 1/ Check postfix status on WEBSRV (10.0.0.3) service postfix status It should show as running… service httpd status It should… Read more CentOS – Inbound NAT (PART 14)
Lab 13: Outbound NAT References: http://www.howtoforge.com/nat_iptables NAT is Network Address Translation. It allows internal LAN computers to access the Internet. When a LAN computer accesses the internet, the 10.0.0.x is translated by the firewall to 216.123.169.85. 1/ Configurations: You can perform GUI setup by running the setup command. (This is for your references only, you… Read more CentOS Outbound NAT (PART 13)
Lab 12: Firewall Basic 1/ Preparation On the firewall server FWSRV, we configure two interfaces as follows: eth1 = 10.0.0.1 (LAN) eth0 = 216.123.169.85 (WAN) 2/ Installing IPTABLES We are going to install iptables by using the following command: rpm –qa iptables to install IPTABLES from the Internet, use the following commands yum install iptables 3/ IPTABLES… Read more CentOS – Firewall Basic (Part 12)
Lab 11: Squid Rules Squid rules allows / disallows web access for client computers. On a client computer, access the web site cnn.com to ensure you can access that site. 1/ Now we are going to block that site. Create a deny file that contains the URL to be blocked. vi /etc/squid/webdeny .cnn.com .news.com.cn :x… Read more CentOS – Squid Rules (PART 11)