Project Presentation

Information Technology
Department
Project Assessment
Course IT371T
Section: 8W1
 Team presentation
Role description Role name ID Name

installing and DNS server 442001131 Gyida Alanazi

configuring, security administration
configuration
Setup, Configure, mail server 442001344 Nora Ahmad Al Hassan
Checking and testing
Email Server

Installing, DataBase Server 442004159 Deema Ali AlFrihi

configuration,
Security
DataBase Server
Project realisation
DNS server
 Project organization
DNS server
?What is the Domain Name System (DNS)
The Internet is the world’s largest computing network, with more than 580 million users. From the perspective of a user,
each node or resource on this network is identified by a unique name: the domain name. Some examples of Internet
:resources are
Web servers—for accessing Web sites •
Mail servers—for delivering e-mail messages •
.Application servers—for accessing software systems and databases remotely •
 Project realization
DNS server
Installation
Install Bind
Install the bind9 package using the appropriate package management utilities for your Linux
.distributions
:On Debian/Ubuntu flavors, do the following

:On Redhat/CentOS/Fedora flavors

All the DNS configurations are stored under /etc/bind directory. The primary configuration is
/etc/bind/named.conf which will include other needed files. The file named /etc/bind/db.root
.describes the root nameservers in the world
Project realisation
Configure Cache NameServer

The job of a DNS caching server is to query other DNS servers and cache the response. Next time when the same query is given, it will provide the
.response from the cache. The cache will be updated periodically

Please note that even though you can configure bind to work as a Primary and as a Caching server, it is not advised to do so for security reasons.
.Having a separate caching server is advisable

All we have to do to configure a Cache NameServer is to add your ISP (Internet Service Provider)’s DNS server or any OpenDNS server to the file
./etc/bind/named.conf.options. For Example, we will use google’s public DNS servers, 8.8.8.8 and 8.8.4.4
.Uncomment and edit the following line as shown below in /etc/bind/named.conf.options file

.After the above change, restart the DNS server

 Project realisation
Test the Cache NameServer
.You can use the dig command to test DNS services

Now when the second time you execute the dig, there should be an improvement in the Query time. As you see below, it took only 3 msec the second time, as it is
.getting the info from our caching DNS server
 Project realisation
Configure Primary/Master Nameserver

.” Next, we will configure bind9 to be the Primary/Master for the domain/zone “thegeekstuff.net

As a first step in configuring our Primary/Master Nameserver, we should add Forward and Reverse
.resolution to bind9
zone " thegeekstuff.net " {
type master;
file "/etc/bind/db. thegeekstuff.net ";
};
zone "0.42.10.in-addr.arpa" {
type master;
notify no;
file "/etc/bind/db.10";
};

Now the file /etc/bind/db.thegeekstuff.net will have the details for resolving hostname to IP
address for this domain/zone, and the file /etc/bind/db.10 will have the details for resolving IP
.address to hostname
 Project realisation
Build the Forward Resolution for Primary/Master NameServer

Now we will add the details which is necessary for forward resolution into /etc/bind/db.
. thegeekstuff.net
$ sudo cp /etc/bind/db.local /etc/bind/db. thegeekstuff.net

.Next, edit the /etc/bind/db.thegeekstuff.net and replace the following

In the line which has SOA: localhost. – This is the FQDN of the server in charge for this )1
domain. I’ve installed bind9 in 10.42.0.83, whose hostname is “ns”. So replace the
.).(“localhost.” with “ns.thegeekstuff.net.”. Make sure it end’s with a dot

In the line which has SOA: root.localhost. – This is the E-Mail address of the person who )2
.is responsible for this server. Use dot(.) instead of @. I’ve replaced with lak.localhost

In the line which has NS: localhost. – This is defining the Name server for the domain )3
(NS). We have to change this to the fully qualified domain name of the name server.
.Change it to “ns.thegeekstuff.net.”. Make sure you have a “.” at the end
Project realisation
Next, define the A record and MX record for the domain. A record is the one which maps
.hostname to IP address, and MX record will tell the mailserver to use for this domain
Once the changes are done, the /etc/bind/db.thegeekstuff.net file will look like the
:following
$TTL 604800
@ IN SOA ns.thegeekstuff.net. lak.localhost. (
1024 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS ns.thegeekstuff.net.
thegeekstuff.net. IN MX 10 mail.thegeekstuff.net.
ns IN A 10.42.0.83
web IN A 10.42.0.80
mail IN A 10.42.0.70
 Project realisation
We will add the details which are necessary for reverse resolution to the file /etc/bind/db.10. Copy the file
/etc/bind/db.127 to /etc/bind/db.10
$ sudo cp /etc/bind/db.127 /etc/bind/db.10

Next, edit the /etc/bind/db.10 file, and basically changing the same options as /etc/bind/db.thegeekstuff.net
$TTL 604800
@ IN SOA ns.thegeekstuff.net. root.localhost. (
20 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS ns.

.Next, for each A record in /etc/bind/db.thegeekstuff.net, add a PTR record

$TTL 604800
@ IN SOA ns.thegeekstuff.net. root.thegeekstuff.net. (
20 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire 604800 ) ; Negative Cache TTL
;
@ IN NS ns.
83 IN PTR ns.thegeekstuff.net.
Finally, restart the bind9 service: 70 IN PTR mail.thegeekstuff.net.
80 IN PTR web.thegeekstuff.net.

$ sudo service bind9 restart

 project realisation
test
nslookup
.nslookup followed by the domain name will display the “A Record” ( IP Address ) of the domain
$ nslookup redhat.com
Server: 192.168.19.2
Address: 192.168.19.2#53
Non-authoritative answer:
Name: redhat.com
Address: 209.132.183.181

In the above output, server refers to the IP address of the DNS server. Then the below section
”provides the “A Record” ( IP Address ) of the domain “redhat.com
Project organisation
mail server
Project realisation
mail server
The electronic equivalent of your friendly neighborhood
mailman is a mail server. A mail server is a computing device
that manages and delivers e-mail through a network, typically
the Internet. It is also sometimes referred to as an e-mail server.
Emails can be delivered to other mail servers by a mail server
after being received from client PCs. Emails can also be sent
from a mail server to client computers. A client computer is
typically the device you use to read your email, such as the PCs
and smartphone . you have protocols to do this process SMTP
protocol handles any outgoing mail requests and sends emails,
POP / IMAP for incoming mail servers.
Project realisation
mail server
Mail service components
The mail service on any server has three components:

Mail user agent (MUA): is the graphical user

interface GUI, the part that lets you write and send
emails, like Thunderbird or Outlook.

Mail transport agent (MTA): this component is

responsible for getting the mail from one site to
another like Sendmail and Postfix which are
implementations of SMTP.

Mail delivery agent (MDA): This component is in

responsible for distributing messages that have
been received to the correct user mailbox, such as
Procmail or postfix-maildrop, on the local machine.
Setup Linux Email Server
The Postfix mail server is a widely used among system administrators nowadays. on the majority of current Linux
distributions, Postfix is the default mail server.
Check if it is installed on your system:

If not installed, you can install Postfix mail server on different way based distribution:
On Debian based distros like Ubuntu

On Red Hat

Run the postfix service and enable it on system startup:

Than, choice type of configuration of the Postfix mail server .No configuration, Internet site, Internet with
smarthost, Satellite system, and Local only, we will choose No configuration option.
 Configure Linux
mail server
You must configure the Postfix mail server after installing it; the majority of its configuration files may be found in
the /etc/postfix/ directory one of this /etc/postfix/main.cf file contains the basic settings for the Postfix mail server.
There are multiple options in this file, including:
- Myhostname
his is the Internet hostname, which Postfix will receive emails on it.
- Mydomain
The mail domain that you will be servicing
- Myorigin
All emails sent from this mail server will look as though it came from this option
- Mydestination
lists the domains that the Postfix server uses for incoming emails.
- Mynetworks
This will let you arrange which servers can relay through your Postfix server. Only local addresses should be accepted,
similar to local mail programs on your server.
- inet_protocols
.IP protocol version used for server connections
Checking the mail queue
Sometimes there are too many messages in the mail queues. There are several causes for this, including network issues or
anything else that can cause mail delivery delays.
To check the mail queue:

You should flush the mail queue if it is full and it takes several hours to process a message:

If you change the configuration files then need to reload the service:

You can check for errors after typing any configuration in case you made a mistake.:
Secure mailboxes from spam using SpamAssassin
Nobody likes spam, and SpamAssassin is likely the best free, open source spam fighting tool you could expect to have on your
side.
Installing:

Run the service and enable it on system startup:

Test Linux mail server

After configuring the Postfix mail server correctly, you should test your mail server.
Send a message to another user on the same server first, and if that succeeds, send it to a remote location
Project organisation
database server
 Project realisation
database server
Every Linux admin must install and set up a database at some point. This can include
deploying a dynamic website, such as for WordPress, or storing data for web
applications as well as customer, client and employee records. Databases are crucial
.for every type of business

The databases available for Linux range from small, embedded tools such as SQLite to
powerful relational databases such as MySQL and even NoSQL databases for big
:data. Some of the more popular databases available for Linux include
PostgreSQL •
MariaDB •
IBM Db2 •
Oracle Database •
 Project realization
database server
.first open your terminal -1

Import the public repository GPG keys-2

wget-qO-https://packages.microsoft.com/keys/microsoft.asc | sudo
– apt-key add
The first step requires downloading GPG keys, a public cryptography key, from the
.Microsoft package store

Register the SQL Server 2019 Linux Ubuntu repository -3

sudo add-apt-repository "$(wget -qO-
s://packages.microsoft.com/config/ubuntu/20.04/mssql-server-20
ist
“)
This step adds an APT repository for SQL Server 2019 Linux on Ubuntu 20.04. The add-apt-
repository uses python script to add an ART repository in the file – /etc/apt/sources.list
 Project realization
database server

.You can verify that the repository is defined in the /etc/apt/sources.list file-4

Update the repository index-5

sudo apt-get update
This step can apt-get update command that downloads the package information from the repository defined
.in the /etc/apt/sources.list

Install SQL Server Linux -6

sudo apt-get install -y mssql-server
We are now ready to install SQL Server on Ubuntu distribution. The below command starts SQL Server
installation by downloading the package from the Microsoft repository
 Project realization
database server
:Then to configure your SQL server on Linux follow write these commands
:First to start configuring the SQL Server
sudo /opt/mssql/bin/mssql-conf setup
:Second verify the installation by checking the mssq1 service
systemctl status mssql-server
 Project realization
database server
.To improve security, enable an encrypted connection between the ESET PROTECT Server and the SQL database

:Perform the steps below on the ESET PROTECT Server Linux machine
.open the terminal as a root -1

.stop the eraserver service -2

Service eraserver stop

Open the StartupConfiguration.ini file -3

nano /etc/opt/eset/RemoteAdministrator/Server/StartupConfiguration.ini

:Add the following command to the end of the file -4

;Encrypt=yes;TrustServerCertificate=yes

.Save the updated file -5

:Start the eraserver service -6

service eraserver start

If you are able to log in to the ESET PROTECT Web Console, the encrypted connection to the database works -7
.properly
 References

1-
https://www.plesk.com/blog/various/setting-up-and-confi
guring-a-linux-mail-server/

2-
https://www.thegeekstuff.com/2014/01/install-dns-server
/

3
https://www.techtarget.com/searchdatacenter/tip/How-
to-set-up-a-MySQL-database-in-Linux