[ALUG] FREE IT WORKSHOPS AT JR INSTITUTE.

[Andreas Tauscher]

On 30.09.2016 10:32, Lomayani S. Laizer via Linux wrote:
> Hello Rogers,
> Good idea. We had same idea. I think we can give support by giving some
> virtual machines which accessible internet in our cloud services
> 
> I can add
> windows administration

Samba4?

> configuring mail servers in linux

Some about pre-queue filters, milter, DKIM/DMARC [1,2], DANE [3] and the
then mandatory DNSSEC [4].
A small introduction in the cryptography behind DKIM, DANE and DNSSEC.
A mail server set up meeting actual security standards is a little bit
more complicated then it looks on the first view ;)
Some fancy stuff with dovecot like proxies, directors, replicators,
sieve filters etc.
Autodiscover and autoconfig.

> virtualization

Especially for improving security. The number of systems I see nearly
daily never updated since years: Spooky. For some I would need only
minutes to get from remote root access. The needed exploit I get with
copy'n'paste.
The admin is afraid to break something with an update.
Virtualization is here a simple and cheap tool to check if something
breaks. Unfortunate many don't know how easy it is to shift from iron to
virtual.
And then the next logical step: After making the servers virtual we do
the same with switches: Software defined networks.

Or a topic for network administration: DNS and DHCP in LANs.
bind9, powerdns, unbound, isc-dhcp, kea-dhcp, iPXE etc...

Andreas

[1] https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail
[2] https://en.wikipedia.org/wiki/DMARC
[3] https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities
[4] https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.habari.co.tz/pipermail/linux/attachments/20161003/239f2785/attachment.pgp>