A-M #cd /etc/ssl #vim /etc/ssl/openssl.cnf #vim /usr/lib/ssl/misc/CA.pl #/usr/lib/ssl/misc/CA.pl –newca ※암호는 korea2020!, CN은 alpha-CA로 지정 #apt –y install apache2 #cd /etc/ssl/ #openssl req –new –out crl.req –newkey rsa:2048 –keyout crl.key –nodes ※CN은 crl.alpha.com #openssl ca –in crl.req –out crl.crt #openssl ca –gencrl –out /var/www/html/alpha-CA.crl #a2enmod ssl #a2ensite default-ssl.conf #vi..

A-M #apt –y install bind9 #vim /etc/bind/named.conf.options #vim /etc/bind/named.conf #cp /etc/bind/db.empty /var/cache/bind/alpha.zone #cp /etc/bind/db.127 /var/cache/bind/192.rev #vim /var/cache/bind/alpha.zone :%s:localhost:ns.alpha.com:g #vim /var/cache/bind/192.rev :%s:localhost:ns.alpha.com:g #chmod 777 –R /var/cache/bind #systemctl restart bind9 #vim /etc/resolv.conf scp /etc/resolv.conf ..

Root로 로그인 커넥트 클릭 Apt install smbclient cur, lynx dnsutils ldap-utils ftp lftp wget ssh nfs-common rsync, telnet traceroute tcptraceroute Y로 한다 설치중 Apt intall vim net-tools dnsutils ssh telnet open-vm-tools 엔터 후 설치…. Vim /etc/vim/vimrc 요렇게 수정 ^^; Vim/etc/apt/sources.list 7 8번 주석 처리 Vim/etc/ssh/sshd-config Tap 이용 ^^

file #apt install bind9 –y (dns 설치) Vim /etc/bind/named.conf.options 옵션파일을 수정해준다. Vim /etc/bind/named.conf.default-zones Wq 저장 Cd /etc/bind cp db.127 skill39.zone cp db.127 skill39.zone.ext cp db.127 1.rev cp db.127 2.rev Wq 저장 Cd /etc/bind cp db.127 skill39.zone cp db.127 skill39.zone.ext cp db.127 1.rev cp db.127 2.rev Vi skill39.zone.ext Vi 1.rev Vi 2.rev #systemctl restart bind9 Vi /etc/reso..

private ※ 배포 자료인 skill39-backup.sql을 /root 아래에 옮겨놓고 진행 #mysql –u root –p

fw(skill39.net) #iptables -t nat -A PREROUTING -s 10.8.0.0/24 -d 10.10.10.1 -p tcp --dport 443 -j DNAT --to 200.220.55.2 #iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -d 200.220.55.2 -p tcp --dport 443 -j SNAT --to 200.220.55.1 #dpkg-reconfigure iptables-persistent #cd /etc/openvpn/ #openssl req -new -out vpn.req -newkey rsa:2048 -keyout vpn.key -nodes ※ CN = 200.220.55.1 #openssl ca -in vpn.re..

fw(skill39.net) #openssl req -new -out mail1.req -newkey rsa:2048 -keyout mail1.key –nodes ※ CN = mail.skill39.net #openssl ca -in mail1.req -out mail1.crt #openssl req -new -out mail2.req -newkey rsa:2048 -keyout mail2.key –nodes ※ CN = mail.worldskills.org #openssl ca -in mail2.req -out mail2.crt private #cd /etc/ssl #scp 192.168.2.1:/etc/ssl/mail1.* ./ #scp 192.168.2.1:/etc/ssl/CA/cacert.pem ..

public #apt install proftpd fail2ban -y #cd /etc/ssl/ #scp 200.220.55.1:/etc/ssl/ftp.* ./ #chmod 777 -R /var/www/ #vi /etc/proftpd/proftpd.conf #vi /etc/proftpd/proftpd.conf #cd /etc/proftpd/ #touch ftpd.passwd #touch ftpd.group #chown proftpd:nogroup ftpd.* #chmod 400 ftpd.* #ftpasswd -file /etc/proftpd/ftpd.passwd -uid 33 -gid 33 -name webmaster -shell /bin/false -home /home/webmaster -passwd ..

fw(skill39.net) #openssl req -new -out www.req -newkey rsa:2048 -keyout www.key -nodes ※ CN = www.worldskills.org #openssl req -new -out public.req -newkey rsa:2048 -keyout public.key -nodes ※ CN = public.worldskills.org #openssl ca -in www.req -out www.crt #openssl ca -in public.req -out public.crt fw(worldskills.org) #apt install nginx -y #cd /etc/ssl #scp 200.220.55.1:/etc/ssl/*.crt ./ #scp 2..

private #apt install apache2 -y #vi /etc/apache2/sites-enabled/000-default.conf #a2enmod authnz_ldap #a2ensite 000-default.conf #systemctl restart apache2 public #apt install apache2 -y #cp /etc/apache2/sites-available/000-default.conf /etc/apache2/sites-available/www.conf #cp /etc/apache2/sites-available/000-default.conf /etc/apache2/sites-available/public.conf #vi /etc/apache2/sites-available/..