Install & configure DNS - SSH - Apache

The Virtual Machines can be implemented using any hypervisor e.g. VMWare Player, Virtual Box or anything else you think is appropriate.

You can use bridged or host only networking when setting up these Virtual Machines. When implementing the Virtual Machines, rather then obtaining an address from the HyperVisors DHCP server you should ensure the addresses used are static and assigned from your network. You Will Need To Work Out What Address Space You Are Using And How It Will Impact Your Lan.

Part 1: Virtual Machine One DNS & SSH Server

The first Virtual Machine should be installed and have the BIND (DNS) server installed on it. While you do not own any address space/ name space your name server should manage the following domains:

The name server should answer queries for this domain. In addition to the saffioti.org.au zone, a zone should be set up for the reverse zone the reverse zone would be whatever the address range is of your virtual machine. You should do some research on how Bind handles reverse zones.

You should set up the saffioti.org.au zone with the usual information including SOA, NS and other records where appropriate. The address used for this should be the address of the virtual machine. You should give this Virtual Machine an A record with the name server1. You should also create a A record for server2

In addition to this you should create an CNAME record with the name www. When a user does a lookup on www.saffioti.org.au- the address returned should be that of the other virtual machine (Virtual Machine Two).

Be sure to create the appropriate reverse (PTR) records for the machines and to help other administrators be sure to put in place appropriate TXT records.

Once complete, you should fine tune your DNS Servers Virtual machine. Do this by disabling services that were installed but are not required. Be very careful not to break anything here. As a tip you will want to keep both DNS and SSH services active. Ensure both DNS and SSH are invoked at startup.

Finally harden this Virtual Machine using a firewall. Set up filters which allow access to the services possibly being access on the Virtual Machine from other hosts – specifically SSH and DNS. You can assume this incoming traffic can come from anywhere. You will need to make sure these rules always take affect at boot.

Test your virtual machine by setting your Host computer (i.e. the computer that is running the VM) Name Server to the address of the Virtual Machine. See if you can resolve queries for the A records create in saffioti.org.au i.e. server1 and www.

Document the entire process and challenges you experienced. You can install BIND from source or using your package manager.

Part 2: Virtual Machine Two

The second Virtual Machine is to have the LAMP software package installed. LAMP is a standard bundle in the Ubuntu Server platform.

Once complete set up this Virtual Machine to host a website using the Apache Web Server.

The Virtual Machine should have a statically assigned address which matches that specified in the A record for host www.

Test your Apache Server Virtual Machine by using a web browser on another host and trying to browse the website saffioti.org.au.

Once you have set up the web server and tested it, install a FTP server. The FTP server would allow users to upload/ download files to the web server. Configure the server appropriately and then test from another host.

Finally harden this host so that only services being used can be accessed by other machines. You will need to use IPTables.

Document the entire process and challenges you experienced.

Part 3: Simple Web Services

In Virtual Machine Two you set up a web server for the DNS name www.saffioti.org.au. The server is implemented using the HTTP protocol listening on port 80. Your challenge is to make the same site accessible using the HTTPS protocol. To do this set up SSL with a self signed certificate for the site.

Once configured correctly you should be able to access www.saffioti.org.au on both HTTP/HTTPS ports. Naturally you will need to make appropriate changes to your firewall rules.

Document the entire process and challenges you experienced.

Rationale
This assessment task will assess the following learning outcome/s:
Be able to describe the duties and responsibilities of a systems administrator.
Be able to manage servers from the command line.
Be able to create and manage basic information services.
Be able to write scripts to automate various server management tasks.
Be able to analyse and improve the performance of servers.
Be able to formulate methods for protecting data and services accessed via the internet.

This task is used to install and configure the SSH and DNS server on Ubuntu virtual machine. So, first user needs to install the DNS server on virtual machine. This process is demonstrated as below (Edwards, 2013).

Install and Configure of the DNS Sever

To install and configure the DNS server by using the following steps.

First, update user virtual machine to install the DNS server by using the below command.

Primary DNS Server configuration process is demonstrated as below.

To configure the primary DNS server by open the configure file. It is shown below.

After, user needs to create the forward zone file for DNS server. The procedures are demonstrated as below.

Then, user requires to create the reverse zone file and it is demonstrated as below.

After, checking the BIND configuration syntax and it is demonstrated as underneath.

Once successfully checked the BIND configuration syntax. Then restart the BIND. It is shown below.

Configuration of primary DNS server is successfully completed, then user needs to configure the secondary DNS server. This process is demonstrated as below.

Configuring DNS Clients

Here, user configuring the DNS clients and it processes are illustrated as below (Douglas, 2015).

Finally, user needs to test the client by using the following steps.

For Forward zone,

For Reverse Zone,

Also, test the configuration file by open test configuration file. It is demonstrated as below.

The installation and configuration of SSH server process is demonstrated as below.

First, install the SSH server by using the below procedure and it is demonstrated as below.

Update user virtual machine to install the SSH server by using the below command.

Configuration of SSH processes is shown below.

Finally, successfully installed the DNS and SSH server on virtual machine one.

This task is used to install and configure the Apache web server and FTP server.

Installation of Apache web server process is demonstrated as below.

First, update user virtual machine to install the Apache web server by using the below command.

Configuration of Apache web server process is demonstrated as below.

Installation and configuration of FTP server process is demonstrated as below (Thomas & Vugt, 2011).

First, user requires to install the FTP server on virtual machine by using the below command.

Update user virtual machine to install the FTP server by using the below command.

After, create the new FTP user on FTP server. This processes are demonstrated as below.

Then provide the directory permissions for created FTP user. This processes are demonstrated as below.

After, Configure vsftpd. This processes are demonstrated as below.

Finally, Test FTP server by using the below command.

This task is used to install and configure the DNS server on Ubuntu virtual machine two. So, first user needs to install the DNS server on virtual machine two. This process is demonstrated as below.