Submitted to : Mr. Tith Seth

Submitted by : KHOEM Chendavorn

Class : SNA-213 “A”

Deadline : Sunday 18th , November 2012

PASSERELLES NUMERKIQU

ES CAMBODIA

Network Administrator

IPTABLES

Contact:

Phone Number: 0972685549

E-mail Address: chendavorn.khoem@gmail.com

School’s mail : chendavorn.khoem@passerellesnumeriques.org

Website : chendavorn.weebly.com

Tastes:

Allow Staff and Students to obtain IP address DHCP Server

Allow Staff and Students to use DNS Server

Allow Staff and Students to access to FTP Server

Allow only 5 staffs to remote ssh to Linux SSH

Allow Staff and Students to join Domain

Allow only 5 staffs to Remote Desktop to Server (DNS Server, DHCP Server...)

Network Structure

Table of Contents

I. Practice..........................................................................................................41. Allow Staff and Students to obtain IP address from DHCP Server......................................4

1.1. We test LAN Staff to know whether clients can obtain IP address from DHCP or not................6

1.2. We test LAN Students to know whether clients can obtain IP address from DHCP or not.........6

2. Allow Staff and Students to use DNS Server.......................................................................7

2.1. We test LAN Staff to know whether clients can use DNS Server or not........................................7

2.2. We test LAN Students to know whether clients can use DNS Server or not................................8

3. Allow Staffs and Students to access to FTP Server............................................................8

3.1. Test LAN Staffs to know whether they can access to FTP Server or not......................................9

3.2. Test LAN Students to know whether they can access to FTP Server or not................................9

4. Allow only 5 staffs to remote ssh to Linux SSH.................................................................10

5. Allow Staff and Students to join Domain............................................................................11

5.1. Test LAN Staffs to know whether they can join domain or not.....................................................12

5.2. Test LAN Students to know whether they can join domain or not................................................13

6. Allow only 5 staffs to remote Desktop to Server (DNS Server, DHCP Server…)..............14

I. Practice1. Allow Staff and Students to obtain IP address from DHCP Server

- We type vim ip.sh to write rules to allow clients to obtain IP address from DHCP.

- Make the file ip.sh to start up.

- Edit the file as following

- View the current rule by entering: iptables -v -L -n

1.1. We test LAN Staff to know whether clients can obtain IP address from DHCP or not.

1.2. We test LAN Students to know whether clients can obtain IP address from DHCP or not.

2. Allow Staff and Students to use DNS Server

2.1. We test LAN Staff to know whether clients can use DNS Server or not.

2.2. We test LAN Students to know whether clients can use DNS Server or not.

3. Allow Staffs and Students to access to FTP Server

3.1. Test LAN Staffs to know whether they can access to FTP Server or not.

3.2. Test LAN Students to know whether they can access to FTP Server or not.

4. Allow only 5 staffs to remote ssh to Linux SSH

The result

5. Allow Staff and Students to join Domain

5.1. Test LAN Staffs to know whether they can join domain or not.

5.2. Test LAN Students to know whether they can join domain or not.

6. Allow only 5 staffs to remote Desktop to Server (DNS Server, DHCP Server…)

The End…!

The End…!