Implementarea

Serviciilor de Rețea
în Linux

Alexandru Juncu
alex.juncu@rosedu.org

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 1
 Agenda

Servicii de rețea
– WWW, Email, DNS

Practic
– instalare
– configurare

Mai practic
– depanare
– monitorizare

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 2
 Înainte de a începe

Presupuneri
– cunoștințe de bază de utilizare Linux în linia de comandă
– familiaritate cu distribuții bazate pe Debian
– noțiuni de bază de networking știute

Pre-keywords
– OSI, TCP/IP
– IP, rutare, pachet
– TCP/UDP, port, SSL/TLS
– URL, domeniu

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 3
 Infrastructură rețea

Înainte ca orice serviciu să ruleze, avem nevoie de

infrastuctură

Configurare
– adrese IP, rute
– ifconfig, route, ip (iproute2)
– ifup, ifown, /etc/network/interfaces

Depanare
– ip [address| route] show
– ping
– traceroute

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 4
 Topologia

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 5
 Servicii de rețea - Web

Serviciu
– conținut (text, imagini)
– HTML, PHP, JPG, PNG, SVG

Protocoale
– HTTP (port 80)
– HTTPS (port 443)
• SSL/TLS

Clienți: Firefox, Chrome, Internet Explorer, w3m, elinks

Daemoni: Apache, Apache2, lighttpd, nginx, IIS

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 6
 Servicii de rețea - DNS

Serviciu
– rezolvare nume domenii

Protocol
– DNS (UDP/TCP port 53)

Daemoni: bind9

Clienți de interogare: dig, host

Clientul efectiv: resolver library (gethostbyname)

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 7
 Servicii de rețea - Email

Serviciu
– mesagerie

Protocoale
– SMTP (TCP port 25)
– POP3 (TCP port 110)
– IMAP (TCP port 143)
– POP3S, IMAPS (TCP port 995, respectiv 993)

Clienți: Thunderbird, Outlook, Evolution, mutt

– aka MUA

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 8
 Servicii de rețea - Email

Daemoni
– MTA
• postfix
• exim
• sendmail
• Courier
– IMAP/POP3
• Courier
• Dovecot
• Cyrus IMAP

MDA
• procmail, Maildrop
New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 9
 Servicii de rețea

Web

DNS Email

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10
 Servicii de rețea - SSH

Serviciu
– administrare la distanță; transfer securizat de fișiere la distanță

Protocol
– SSH (TCP port 22)
• SSL/TLS

Daemoni: openssh-server

Clienți: ssh, scp, winscp

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 11
 Servicii de rețea - SSH

Fișiere configurare
– /etc/ssh/ssh_config
• ~/.ssh/id_rsa
• port, versiune protocol
– /etc/ssh/sshd_config
• port, versiune protocol
• ~/.ssh/authorized_keys

Depanare
– /var/log/auth.log

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 12
 Servicii de rețea - Syslog

Serviciu
– monitorizarea sistemului

Daemon
– sysklogd, rsyslogd

Fișiere configurare
– /etc/syslog.conf

Clienți:
– $PAGER (less, more) , $EDITOR (vim) :P
– tail -f

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 13
 Apache2 Web Server

Fișiere de configurare
– Old way (apache1):
• /etc/apache/httpd.conf
• /etc/http/httpd.conf
–New way (apache2):
• /etc/apache2/apache2.conf
• /etc/apache2/ports.conf
• /etc/apache2/conf.d/*
• /etc/apache2/sites-enabled/* (linked to ../sites-available/*)
• /etc/apache2/mods-enabled/* (linked to ../mods-available/*)

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 14
 Apache2 Web Server

Comenzi:
– apache2ctl start|stop|restart|reload|graceful|configtest
– /etc/init.d/apache2 start|stop|restart|reload|graceful|configtest
– a2ensite, a2enmod, a2dissite, a2dismode
– reload e mai rapid (citește fișierele de configurare
– anumite configurări necesită restart

Depanare
– /var/log/apache2/*

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 15
 Apache2 – Sites & Mods

Sites
– VirtualHosts
• HTTP 1.1
– /etc/apache/sites-available/
– a2ensite --> symlink în /etc/apache/sites-enabled/

Mods
– ssl, php,userdir
– /etc/apache/mods-available/MODULE.conf
– /etc/apache/mods-available/MODULE.load
– a2enmod --> symlink în /etc/apache/mods-enabled/

Restart! (sau Reload!)

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 16
 Apache2 – VirtualHosts
NameVirtualHost talks.rosedu.org:80
<VirtualHost talks.rosedu.org:80>
ServerAdmin alex.juncu@rosedu.org
ServerName talks.rosedu.org
ServerAlias www.talks.rosedu.org

DocumentRoot /home/rtt/public_html
<Directory /home/rtt/public_html/>
AllowOverride all
Order allow,deny
allow from all
</Directory>

ErrorLog /var/log/apache2/rosedu.org/talks.rosedu.org.error.log
LogLevel warn

CustomLog /var/log/apache2/rosedu.org/talks.rosedu.org.access.log combined

</VirtualHost>

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 17
 BIND9

Fișiere configurare
– /etc/bind/named.conf
• specificarea zonelor
– /etc/bind/named.conf.options
• opțiuni bind
– /etc/bind/db.*
• fișiere zonă

Depanare
– all over the place
– Atenție la punct (.)!
– named-checkconf, named-checkzone
– /var/log/daemon.log

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 18
 BIND9 – named.conf

# rosedu
zone "rosedu.org" {
type master;
file "/etc/bind/db.rosedu.org";
};

(again) Atenție la punct (.)!

Verificare
– named-checkzone

Restart!
– /etc/init.d/bind9 restart
– /etc/init.d/named restart

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 19
 BIND9 – fișier zonă
$TTL 86400
$ORIGIN rosedu.org.
@ 1D IN SOA ns.rosedu.org. nsmaster.rosedu.org. (
2007122404; serial
3H ; refresh
15m ; retry
1w ; expire
3h ; minimum
)
IN NS ns.rosedu.org.
IN NS ns2.rosedu.org.
IN MX 5 mail.rosedu.org.

@ IN A 141.85.37.25

ns IN A 141.85.37.41
ns2 IN A 141.85.37.25

www IN A 141.85.37.44
mail IN A 141.85.37.41
wouso IN CNAME @
cdl.rosedu.org. IN CNAME @

(set soacra-mode on) Atenție la punct (.)!!!

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 20
 Postfix

Fișiere configurare
– /etc/postfix/master.cf
• servicii
– /etc/postfix/main.cf
• everything else
– postconf

myhostname = rosedu
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination = localhost.localdomain, localhost, rosedu.org
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 21
 The mail queue & Mailboxes

mailq, postsuper, postqueue

/var/spool/mail

Mailboxes
– ~/Maildir
• maildirmake
– ~/Mbox

~/.forward

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 22
 Aliases

În /etc/postfix/main.cf
– alias_maps = hash:/etc/aliases
– se pot configura alias-uri pe domenii (virtual alias domains)

/etc/aliases (Sendmail compatibility)

contact: alexj
admin: root, ddvlad, alexj@gmail.com

– newaliases

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 23
 Virtual Email

În /etc/postfix/main.cf
– virtual_mailbox_domains = virtualdomain.rosedu.org
– virtual_mailbox_base = /var/mail/vhosts/
– virtual_mailbox_maps = hash:/etc/postfix/virtual

/var/mail/vhosts/
– maildirmake

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 24
 Virtual Email

În /etc/postfix/main.cf
– virtual_mailbox_domains = virtualdomain.rosedu.org
– virtual_mailbox_base = /var/mail/vhosts/
– virtual_mailbox_maps = hash:/etc/postfix/virtual

/var/mail/vhosts/
– maildirmake

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 25
 Tips

RTFM!

man

documentație pe Internet

Pornire de la un fișier de configurație existent

Configurare:

editare, salvare, verificare, reditare

FIȘIERE DE LOG!!!1one

Depanare

fișiere log

netstat -ntlup

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 26
 Review / Q&A

Servicii de rețea
BIND9

Web
named.conf

Email
zone

DNS
SOA, A, NS, MX, CNAME

SSH
Postfix

syslog
main.cf

Apache2
aliases

Virtual Host
virtual accounts

site
mailq

mod

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 27
 Implementarea
Serviciilor de Rețea
în Linux

Mulțumesc

New CCNA 307 © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 28