Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Linux Server Foundations, Lab Preparation & DNS (BIND) Deployment
- Linux server architecture, package management, and service lifecycle (
systemd,chkconfig) - Lab environment provisioning: VMware/VirtualBox networking, NAT versus bridged modes, and VM hardening
- DNS fundamentals: forward and reverse zones, record types, recursion versus iteration
- BIND installation and configuration:
named.conf, zone files, and zone transfers - Lab: Building a lab VM, installing BIND, creating forward and reverse zones, and testing resolution using
dig/nslookup
Day 2: Advanced DNS & Security + Core Apache Web Server
- DNS security: TSIG keys, view-based splitting, ACLs, and response policy zones (RPZ)
- Apache installation, module architecture, and core configuration (
httpd.conf,ports.conf) - Virtual hosting: name-based versus IP-based, directory structure, and access controls
- Logging, status monitoring, and initial hardening (security headers, disabling unused modules)
- Lab: Securing BIND with views/ACLs, deploying Apache with virtual hosts, and configuring access logs and basic security headers
Day 3: Advanced Apache, Performance Tuning & MariaDB Installation
- Apache performance tuning: MPM prefork/worker/event, caching (
mod_cache,mod_expires), and compression (mod_deflate) - SSL/TLS implementation: certificate generation, HTTPS virtual hosts, and HSTS enforcement
- MariaDB architecture: storage engines, configuration file structure, and network binding
- MariaDB installation, root setup, user/privilege management, and basic query operations
- Lab: Configuring SSL/TLS on Apache, tuning MPM for concurrent connections, installing MariaDB, and securing root/admin accounts
Day 4: MariaDB Data Management & Postfix Mail Server Setup
- Advanced MariaDB: database/schema creation, index optimization, and user grant structures
- Backup and recovery:
mysqldump,mariabackup, point-in-time recovery, and replication basics - Postfix architecture: SMTP routing, main.cf/transport maps, and delivery agents (LMTP, Dovecot integration)
- Mail server basics: domain configuration, MX records, and relay restrictions
- Lab: Setting up MariaDB backup scripts and testing replication, configuring Postfix for local/domestic delivery, and testing SMTP relays
Day 5: Advanced Postfix Security, Integration & Capstone Project
- Postfix security:
smtpd_recipient_restrictions,smtpd_client_restrictions, SPF/DKIM/DMARC alignment, and TLS for mail - Spam and abuse mitigation: rate limiting, black/white listing, and integration with
rbl/cluebringer - Server integration: DNS → Web → Mail → DB data flow, service dependencies, and centralized logging
- Automation and monitoring: cron jobs, systemd timers,
netdata/prometheusbasics, and log rotation (logrotate) - Capstone: Participants assemble a fully integrated four-server stack (BIND, Apache, Postfix, MariaDB), configure cross-service dependencies, implement security hardening, and present a production-ready architecture diagram and runbook
- Open Q&A, troubleshooting review, and resource distribution
Requirements
- Basic proficiency in Linux
- Fundamental networking concepts and skills
28 Hours
Testimonials (2)
experienced trainer
Monika Biskupska - Osrodek Przetwarzania Informacji - Panstwowy Instytut Badawczy
Course - Kubernetes Security Fundamentals (LFS460)
trainer has hands-on knowledge
