book

TCP/IP Network Administration, 3rd Edition

by Craig Hunt

April 2002

Intermediate to advanced

746 pages

25h 55m

English

O'Reilly Media, Inc.

Read now

Unlock full access

AudienceOrganizationUnix VersionsConventionsWe’d Like to Hear from YouAcknowledgments
TCP/IP and the InternetTCP/IP FeaturesProtocol StandardsA Data Communications ModelTCP/IP Protocol ArchitectureNetwork Access LayerInternet LayerInternet ProtocolThe datagramRouting datagramsFragmenting datagramsPassing datagrams to the transport layerInternet Control Message ProtocolTransport LayerUser Datagram ProtocolTransmission Control ProtocolApplication LayerSummary
Addressing, Routing, and MultiplexingThe IP AddressAddress StructureSubnetsThe Natural MaskCIDR Blocks and Route AggregationIPv6Internet Routing ArchitectureThe Routing TableAddress ResolutionProtocols, Ports, and SocketsProtocol NumbersPort NumbersSocketsSummary
Names and AddressesThe Host TableDNSThe Domain HierarchyCreating Domains and SubdomainsDomain NamesBIND, Resolvers, and namedNetwork Information ServiceMail ServicesSimple Mail Transfer ProtocolPost Office ProtocolInternet Message Access ProtocolMultipurpose Internet Mail ExtensionsFile and Print ServersFile SharingPrint ServicesConfiguration ServersReverse Address Resolution ProtocolDynamic Host Configuration ProtocolHow DHCP worksSummary
Connected and Non-Connected NetworksBasic InformationObtaining an IP AddressObtaining an official network addressObtaining an IN-ADDR.ARPA domainAssigning Host AddressesDefining the Subnet MaskPlanning RoutingObtaining an autonomous system numberRegistering in a Routing DatabasePlanning Naming ServiceObtaining a Domain NameRegistering a DomainChoosing a HostnameOther ServicesFile ServersPrint ServersPlanning Your Mail SystemInforming the UsersSummary
Kernel ConfigurationUsing Dynamically Loadable ModulesRecompiling the KernelLinux Kernel ConfigurationThe BSD Kernel Configuration FileTCP/IP in the BSD KernelThe options statementThe pseudo-device statementThe device statementStartup FilesStartup RunlevelsUnderstanding /etc/inittabThe Internet DaemonThe Extended Internet DaemonSummary
The ifconfig CommandThe Interface NameChecking the Interface with ifconfigAssigning an AddressAssigning a Subnet MaskSetting the Broadcast AddressThe Other Command OptionsEnabling and disabling the interfaceARPPromiscuous modeMetricMaximum transmission unitPoint-to-pointPutting ifconfig in the startup scriptsTCP/IP Over a Serial LineThe Serial ProtocolsInstalling PPPThe PPP DaemonDial-Up PPPchatPPP Daemon SecurityPPP Server ConfigurationSolaris PPPTroubleshooting Serial ConnectionsSummary
Common Routing ConfigurationsThe Minimal Routing TableBuilding a Static Routing TableAdding Static RoutesInstalling static routes at startupInterior Routing ProtocolsRouting Information ProtocolRunning RIP with routedRIP Version 2Open Shortest Path FirstExterior Routing ProtocolsExterior Gateway ProtocolBorder Gateway ProtocolChoosing a Routing ProtocolGateway Routing Daemongated’s Preference ValueConfiguring gatedSample gated.conf ConfigurationsA host configurationInterior gateway configurationsExterior gateway configurationTesting the ConfigurationRunning gated at startupSummary

BIND: Unix Name ServiceBIND ConfigurationsConfiguring the ResolverThe Resolver Configuration FileA resolver-only configurationConfiguring namedThe named.conf FileA caching-only server configurationMaster and slave server configurationsStandard Resource RecordsZone File DirectivesThe $TTL directiveThe $ORIGIN directiveThe $INCLUDE directiveThe $GENERATE directiveThe Cache Initialization FileThe named.local FileThe Reverse Zone FileThe Forward-Mapping Zone FileControlling the named ProcessUsing nslookupSummary
The Network File SystemNFS DaemonsSharing Unix FilesystemsThe share commandThe /etc/exports fileThe exportfs commandMounting Remote FilesystemsThe mount commandThe vfstab and fstab filesNFS AutomounterSharing Unix PrintersLine Printer DaemonThe printcap fileUsing LPDLine Printer ServiceUsing Samba to Share Resources with WindowsConfiguring a Samba ServerThe smb.conf homes sectionSharing directories through SambaSharing printers through SambaNetBIOS Name ServiceNetwork Information ServiceThe nsswitch.conf fileNIS+DHCPdhcpd.confManaging Distributed ServersrcprdistPost Office ServersPOP ServerIMAP ServerSummary
sendmail’s FunctionRunning sendmail as a Daemonsendmail AliasesPersonal Mail ForwardingThe sendmail.cf FileLocating a Sample sendmail.cf FileBuilding a sendmail.cf with m4 macrosGeneral sendmail.cf Structuresendmail.cf Configuration LanguageThe Version Level CommandThe Define Macro CommandConditionalsDefining ClassesSetting OptionsDefining Trusted UsersDefining Mail PrecedenceDefining Mail HeadersDefining MailersSome common mailer definitionsRewriting the Mail AddressPattern MatchingTransforming the AddressTransforming with a databaseThe Set Ruleset CommandModifying a sendmail.cf FileModifying Local InformationModifying OptionsTesting sendmail.cfTesting Rewrite RulesUsing Key Files in sendmailSummary
Installing Apache SoftwareUsing the Red Hat Package ManagerDownloading ApacheConfiguring the Apache ServerConfiguring Apache on SolarisUnderstanding an httpd.conf FileLoading Dynamic Shared ObjectsBasic Configuration DirectivesManaging the SwarmDefining Where Things Are StoredCreating a Fancy IndexDefining File TypesPerformance Tuning DirectivesLogging Configuration DirectivesDefining the log file formatUsing conditional loggingProxy Servers and CachingMulti-Homed Server OptionsDefining Virtual HostsWeb Server SecurityThe CGI and SSI ThreatControlling Server OptionsDirectory-Level Configuration ControlsDefining Access ControlsRequiring user authenticationImproved user authenticationSetting file-level access controlsSetting document-level access controlsUsing EncryptionManaging Your Web ServerMonitoring Your ServerSummary
Security PlanningAssessing the ThreatDistributed ControlUse subnets to distribute controlUse the network to distribute informationWriting a Security PolicyUser AuthenticationThe Shadow Password FileChoosing a PasswordOne-Time PasswordsOPIESecure the r CommandsSecure ShellApplication SecurityRemove Unnecessary SoftwareKeep Software UpdatedSecurity MonitoringKnow Your SystemLooking for TroubleChecking filesChecking login activityAutomated MonitoringAccess Controlwrappertcpd access control filesDefining an optional shell commandOptional access control language extensionsControlling Access with xinetdEncryptionWhen Is Symmetric Encryption Useful?Public-Key Encryption ToolsstunnelFirewallsFunctions of the FirewallFiltering Traffic with iptablesDefining iptables filter rulesSample iptables commandsWords to the WiseSummary
Approaching a ProblemTroubleshooting HintsDiagnostic ToolsTesting Basic ConnectivityThe ping CommandTroubleshooting Network AccessTroubleshooting with the ifconfig CommandTroubleshooting with the arp CommandARP problem case studyChecking the Interface with netstatSubdividing an EthernetNetwork Hardware ProblemsChecking RoutingTracing RoutesLocating an AdministratorChecking Name ServiceSome Systems Work, Others Don’tThe Data Is Here and the Server Can’t Find It!Cache CorruptionThe zone table sectionThe Cache & Data sectionThe Hints sectiondig: An Alternative to nslookupAnalyzing Protocol ProblemsPacket FiltersModifying analyzer outputProtocol Case StudySummary
Dial-Up IPThe dip Script FileA sample dip scriptThe PPP DaemonSignal Processingchat
The gated CommandSignal ProcessingThe gated Configuration LanguageDirective StatementsTrace StatementsOptions StatementsInterface StatementsDefinition StatementsProtocol StatementsThe ospf StatementThe rip StatementThe isis StatementThe bgp StatementThe egp StatementThe smux StatementThe redirect StatementThe icmp StatementThe routerdiscovery StatementThe routerdiscovery client statementThe kernel Statementstatic StatementsControl StatementsThe import StatementThe export StatementAggregate Statements
The named CommandSignal Processingnamed.conf Configuration CommandsThe key StatementThe acl StatementThe trusted-keys StatementThe server StatementThe BIND 9 server statementThe options StatementThe BIND 9 options statementThe logging StatementThe BIND 9 logging statementThe zone StatementThe BIND 9 zone statementThe controls StatementThe BIND 9 controls statementBIND 9 view StatementZone File RecordsStandard Resource RecordsStart of Authority recordName Server recordAddress recordMail Exchanger recordCanonical Name recordDomain Name Pointer recordResponsible Person recordText recordHost Information recordWell-Known Services recordServer Selection record
Compiling dhcpdThe dhcpd CommandThe dhcpd.conf Configuration FileTopology StatementsConfiguration ParametersDHCP OptionsCommonly used optionsOther options
Compiling sendmailThe sendmail Commandm4 sendmail MacrosdefineFEATUREOSTYPEDOMAINMAILERMore sendmail.cfsendmail Macrossendmail Classessendmail Optionssendmail Mailer FlagsThe sendmail K CommandSample script
IP Datagram HeaderTCP Segment HeaderICMP Parameter Problem Message HeaderRetrieving RFCsRetrieving RFCs by Mail

Overview

This complete guide to setting up and running a TCP/IP network is essential for network administrators, and invaluable for users of home systems that access the Internet. The book starts with the fundamentals -- what protocols do and how they work, how addresses and routing are used to move data through the network, how to set up your network connection -- and then covers, in detail, everything you need to know to exchange information via the Internet.Included are discussions on advanced routing protocols (RIPv2, OSPF, and BGP) and the gated software package that implements them, a tutorial on configuring important network services -- including DNS, Apache, sendmail, Samba, PPP, and DHCP -- as well as expanded chapters on troubleshooting and security. TCP/IP Network Administration is also a command and syntax reference for important packages such as gated, pppd, named, dhcpd, and sendmail.With coverage that includes Linux, Solaris, BSD, and System V TCP/IP implementations, the third edition contains:

Overview of TCP/IP
Delivering the data
Network services
Getting startedM
Basic configuration
Configuring the interface
Configuring routing
Configuring DNS
Configuring network servers
Configuring sendmail
Configuring Apache
Network security
Troubleshooting
Appendices include dip, ppd, and chat reference, a gated reference, a dhcpd reference, and a sendmail reference

This new edition includes ways of configuring Samba to provide file and print sharing on networks that integrate Unix and Windows, and a new chapter is dedicated to the important task of configuring the Apache web server. Coverage of network security now includes details on OpenSSH, stunnel, gpg, iptables, and the access control mechanism in xinetd. Plus, the book offers updated information about DNS, including details on BIND 8 and BIND 9, the role of classless IP addressing and network prefixes, and the changing role of registrars.Without a doubt, TCP/IP Network Administration, 3rd Edition is a must-have for all network administrators and anyone who deals with a network that transmits data over the Internet.