RHS333 Red Hat?? Enterprise Linux Security: Network Services Training Class

• Name server topology: public vs. private, DMZs, etc.


• Configuring appropriate recursion and fetching policies


• Using authentication keys


• Running BIND in a chrooted environment

• Configurations to avoid


• Restricting accounts

• Configuring TLS authentication


• Restricting access to directory schema

• Configuring access control


• Authentication configuration options, including TLS


• Implementing the real-time Black Hole List and other


• Anti-spam features

• SSL-tunneled IMAP and POP3 mail

• Configuring restricted guest account

• Advanced xinetd configuration


• Advanced tcp_wrappers configuration

• Containing CGI risks


• Auditing PHP and scripts


• Controlling and monitoring hosted sites

• "Kerberizing" services


• Using Kerberos in heterogeneous environments

• Using public-private key pairs for authentication


• Remote administration using OpenSSH


• Port-forwarding


• Alternate authentication methods

The audience for this course includes system administrators, consultants, and
other IT professio