Get in Touch

Course Outline

Linux Server Foundations, Lab Prep & DNS (BIND) Deployment

  • Linux server architecture, package management, and service lifecycle (systemd, chkconfig)
  • Lab environment setup: Networking in VMware/VirtualBox, NAT vs. bridged modes, and VM hardening practices
  • DNS fundamentals: Forward and reverse zones, record types, and the difference between recursion and iteration
  • BIND installation and configuration: named.conf, zone files, and zone transfer processes
  • Lab: Provisioning a lab VM, installing BIND, creating forward and reverse zones, and testing resolution using dig and nslookup

Day 2: Advanced DNS & Security + Apache Web Server Core

  • DNS security mechanisms: TSIG keys, view-based splitting, ACLs, and response policy zones (RPZ)
  • Apache installation, module architecture, and core configuration files (httpd.conf, ports.conf)
  • Virtual hosting types: Name-based vs. IP-based, directory structures, and access control mechanisms
  • Logging, status monitoring, and initial hardening steps (such as security headers and disabling unused modules)
  • Lab: Securing BIND using views and ACLs, deploying Apache with virtual hosts, and configuring access logs and basic security headers

Day 3: Advanced Apache, Performance Tuning & MariaDB Installation

  • Apache performance optimization: MPM configurations (prefork/worker/event), caching (mod_cache, mod_expires), and compression (mod_deflate)
  • SSL/TLS implementation: Certificate generation, HTTPS virtual hosts, and HSTS enforcement
  • MariaDB architecture: Storage engines, configuration file structures, and network binding
  • MariaDB installation, root setup, user/privilege management, and basic query operations
  • Lab: Configuring SSL/TLS on Apache, tuning MPM for concurrent connections, installing MariaDB, and securing root/admin accounts

Day 4: MariaDB Data Management & Postfix Mail Server Setup

  • Advanced MariaDB: Database and schema creation, index optimization, and user grant structures
  • Backup and recovery strategies: mysqldump, mariabackup, point-in-time recovery, and replication basics
  • Postfix architecture: SMTP routing, main.cf/transport maps, and delivery agents (including LMTP and Dovecot integration)
  • Mail server fundamentals: Domain configuration, MX records, and relay restrictions
  • Lab: Setting up MariaDB backup scripts and testing replication, configuring Postfix for local/domestic delivery, and testing SMTP relays

Day 5: Advanced Postfix Security, Integration & Capstone Project

  • Postfix security: smtpd_recipient_restrictions, smtpd_client_restrictions, SPF/DKIM/DMARC alignment, and TLS for email
  • Spam and abuse mitigation: Rate limiting, blacklisting/whitelisting, and integration with rbl and cluebringer
  • Server integration: Data flow between DNS, Web, Mail, and DB, service dependencies, and centralized logging
  • Automation and monitoring: Cron jobs, systemd timers, basics of netdata and prometheus, and log rotation (logrotate)
  • Capstone: Participants will assemble a fully integrated 4-server stack (BIND, Apache, Postfix, MariaDB), configure cross-service dependencies, implement security hardening, and present a production-ready architecture diagram and runbook
  • Open Q&A, troubleshooting review, and resource distribution

Requirements

  • Foundational Linux skills
  • Basic understanding and skills in networking concepts
 28 Hours

Number of participants


Price per participant

Testimonials (3)

Upcoming Courses

Related Categories