Secure Internet Servers/Firewalls with OpenBSD: Table of Content
These note are the outline for the half-day tutorial on
Secure Internet Servers/Firewalls with OpenBSD: Table of Content
presented at the O'Reilly Open Source Conference
in Monterey, California on July 17, 2000.
This text is copyright by Ian Darwin, but can be used for
promoting the OpenBSD system. Any other use including print publication
requires prior permission in writing or email, from ian@darwinsys.com.
May not be redistributed under the GPL. :-)
- Secure Internet Servers/Firewalls with OpenBSD
- What you will learn today:
- Who should be here today:
- What you will not learn today
- Plan for the day:
- 1 -- The OpenBSD Difference
- OpenBSD Is...
- OpenBSD - Secure by Default
- Code Auditing
- Security Basics
- Local Attacks
- Remote Attacks
- Denial of Service (DOS) Attack
- Paranoia is Good
- Security Policy
- Building a Firewall
- Firewall Terminology
- Firewall Terminology II
- Diagrams of Firewall Configurations
- Inside Router
- 2--OpenBSD System Installation
- Partitioning
- Selecting software
- PostInstall configs
- Ian's Favorite PostInstalls
- Adding your favorite UNIX software I
- Adding UNIX software II
- Ports/Packages to know about
- Adding UNIX software III - Roll your own port
- Add Your Own S/W IV - Emulation
- User Management
- 3--Network Services
- httpd
- HTTPD
- ftpd
- rlogin/telnet/SSH
- ssh - secure (remote) shell
- DNS
- 4--Mail Services
- smtpd - SMTP listener
- SMTPD Filtering
- SMTPD II
- sendmail
- postfix? qmail?
- POP
- 5--LAN services
- Interface configuration
- PPP and friends
- Routing, ARP, DHCP
- XDM
- NIS, NFS
- NFS
- Samba - the SMB/Netbios server for UNIX
- 6--Security services
- sudo
- IPFilter
- NAT - Network Address Translation
- Kerberos
- NTP
- 7--Logging Features
- Syslogd
- IPMon
- Testing Tools
- Mail You Get from Tools
- Tools - Ports to Know About II
- Intrusion Detection
- Intrusion Detection Software
- 8--Virtual Private Networks
- What & Why
- VPN Basic Steps
- Static key setup
- photurisd key exchange
- isakmpd (Oakley, IKE) key exchange
- Conversing with the dark side
- 9--Keeping It Secure
- Keeping System Updated
- Building OpenBSD Kernel
- Building Entire System
- Don't break it
- Learn More from Books
- Learn More Online
- Help Online
- The One Marketing Slide
- Finale
- Help About
- -- The End --