Index

Symbols

.bash_login, Shell startup environment
.bash_logout, Shell startup environment
.bash_profile, Shell startup environment
.config, Creating a .config file
.emacs, Shell startup environment
.exrc, Shell startup environment
.fvwmrc, Shell startup environment
.htaccess, Configuring authentication modules
.inputrc, Shell startup environment
.newsrc, Shell startup environment
.ppprc, Using Options Files
.profile, Shell startup environment
.ssh, Shell startup environment
.twmrc, Shell startup environment
.Xdefaults, Shell startup environment
.xinitrc, Shell startup environment
.xsession, Shell startup environment
/bin, The File Hierarchy
/bin/false, Login shells
/boot, The File Hierarchy
/dev, The File Hierarchy
/dev/md0, Configuring RAID (using mdadm)
/dev/ttyS0, Serial devices
/dev/zero, Swap
/etc, The File Hierarchy
/etc/auto.master, Autofs and automounter
/etc/exports, The mount daemon, Exporting filesystems
/etc/fstab, Mounting and Unmounting, Configuring disks, Daemon initialization
/etc/init.d/autofs, Autofs and automounter
/etc/init.d/bind, Name-server parts in BIND
/etc/init.d/pcmcia, Configuring modules
/etc/init.d/rc, The /etc/init.d/rc script
/etc/inittab, Configuring /etc/inittab
/etc/ld.so.conf, ldconfig
/etc/login.defs, Shell startup environment
/etc/mdadm.conf, Configuring RAID (using mdadm)
/etc/modules.conf, Configuring modules, Multiport boards
/etc/motd, Shell startup environment
/etc/mtab, If you've lost the root password
/etc/ppp/chap-secrets, PAP Versus CHAP
/etc/ppp/ip-down, Routing Through a PPP Link
/etc/ppp/ip-up, Routing Through a PPP Link
/etc/ppp/options, Using Options Files
/etc/ppp/pap-secrets, PAP Versus CHAP
/etc/printcap, Configuring USB devices
/etc/profile, Shell startup environment
/etc/rc.boot, The /etc/init.d/rc script
/etc/rcN.d, The /etc/init.d/rc script
/etc/services, Configuring tcp wrappers
/etc/shells, Login shells
/etc/sysctl.conf, Setting kernel parameters
/etc/X11/XF86Config, Configuring LCD devices
/lib, The File Hierarchy
/lost+found, The File Hierarchy
/proc, The File Hierarchy, Using the /proc filesystem
/proc/bus/pci, Querying your PCI bus
/proc/bus/usb, USB devices
/proc/bus/usb/devices, USB devices
/proc/interrupts, Using the /proc filesystem
/proc/meminfo, Swap
/proc/mounts, The bootprocess, Mounting and Unmounting
/proc/sys/kernel, Customise, build and install a custom kernel and kernel modules (201.4)
/proc/sys/net/ipv4/ip_forward, Using the /proc filesystem, IP forwarding with IPCHAINS
/sbin, The File Hierarchy
/sbin/sulogin, When fsck is started but fails
/tmp, The File Hierarchy
/usr, The File Hierarchy
/usr/share/pci.ids, Querying your PCI bus
/var, The File Hierarchy
/var/named, Name-server parts in BIND
/var/spool/crontabs, Troubleshooting cron processes
0.0.0.0, Routing Through a Gateway
0x1bf, More about partitions tables
10/8, Private Network Addresses
127.0.0.1, The Loopback Interface
172.16/12, Private Network Addresses
192.168/16, Private Network Addresses
640x480, Configuring CRT devices
67, What is DHCP?
68, What is DHCP?
8.3 filename format, Creating an image for a CD-ROM

A

ACK sweep, What is it?
adduser, Troubleshooting authorisation problems
AH, IPSEC
anonymous, Securing FTP servers (2.212.2)
Apache
*, Name-based virtual hosting
.htaccess, Configuring authentication modules
443, Public key cryptography
?, Name-based virtual hosting
access_log, Apache access_log file
AllowOverride, Configuring authentication modules
APXS, APache eXtenSion (APXS) support tool
AuthGroupFile, Group files
AuthType, Configuring authentication modules
AuthUserFile, Configuring authentication modules
BindAddress, Name-based virtual hosting
CLF, Apache access_log file
CustomLog, Setting up a single daemon
Discretionary Access Control, Restricting client user access
DNS, Name-based virtual hosting
DocumentRoot, Name-based virtual hosting
htpasswd, User files
httpd -l, Run-time loading of modules (DSO)
IP-based virtual hosting, IP-based virtual hosting
libssl.so, How to create a SSL server Certificate
Limit, Configuring authentication modules
Listen, Name-based virtual hosting
Mandatory Access Control, Restricting client user access
MaxClients, Configuring Apache server options
MaxKeepAliveRequests, Configuring Apache server options
MaxSpareServers, Configuring Apache server options
MinSpareServers, Configuring Apache server options
modules, Modularity
mod_access, Restricting client user access
mod_auth, Restricting client user access
mod_auth_anon, Restricting client user access
mod_auth_digest, Restricting client user access
mod_ssl, Various Apache and SSL related projects, Apache with mod_ssl
multiple daemons, IP-based virtual hosting
Name-base virtual hosting, Name-based virtual hosting
NameVirtualHost, Name-based virtual hosting
OpenSSL, Various Apache and SSL related projects
PerlSetVar, Configuring mod_perl
Redirect, Customizing file access
Require valid-user, Configuring authentication modules
ServerAdmin, Setting up a single daemon
ServerAlias, Name-based virtual hosting
ServerName, Name-based virtual hosting
ServerRoot, IP-based virtual hosting
SSLCertificateFile, How to create a SSL server Certificate
SSLCertificateKeyFile, How to create a SSL server Certificate
SSLeay, Various Apache and SSL related projects
StartServers, Configuring Apache server options
TransferLog, Setting up a single daemon
User, IP-based virtual hosting
virtual hosting and SSL, IP-based virtual hosting
VirtualHost, Name-based virtual hosting
apsfilter, Using a Windows printer from Linux
APXS, APache eXtenSion (APXS) support tool
ARP
cache, arp and arpwatch
proxy, Routing Through a PPP Link
arp, ifconfig, arp and arpwatch
arpwatch, arp and arpwatch
ATS0=3, PPP Server
Attacks
$TARGET$, Installation and Configuration
ADVANCED_EXCLUDE_TCP, Installation and Configuration
ADVANCED_EXCLUDE_UDP, Installation and Configuration
ADVANCED_PORTS_TCP, Installation and Configuration
ADVANCED_PORTS_UDP, Installation and Configuration
black hole, Description
BLOCKED_FILE, Installation and Configuration
BLOCK_TCP, Installation and Configuration
BLOCK_UDP, Installation and Configuration
CONFIG_FILE, Installation and Configuration
DOS, What they are
IGNORE_FILE, Installation and Configuration
KILL_HOSTS_DENY, Installation and Configuration
KILL_ROUTE, Installation and Configuration
KILL_RUN_CMD, Installation and Configuration
KILL_RUN_CMD_FIRST, Installation and Configuration
Port Scans, Description
PORT_BANNER, Installation and Configuration
RESOLVE_HOST, Installation and Configuration
SCAN_TRIGGER, Installation and Configuration
SYN, What they are
SYSLOG_FACILITY, Installation and Configuration
SYSLOG_LEVEL, Installation and Configuration
TCP_PORTS, Installation and Configuration
UDP_PORTS, Installation and Configuration
WRAPPER_HOSTS_DENY, Installation and Configuration
automount, Autofs and automounter, NFS client: software and configuration

B

backup
plan, Where?
testing, How?
verifying, How?
badblocks, fsck (fsck.*)
baud rate, Serial devices
bind, Name-server parts in BIND
#, Syntax
//, Syntax
;, Syntax
@, Predefined zone statements, The db.local file
allow-query, Configuring the master on privdns
allow-transfer, Configuring the master on privdns
category, The logging statement
chrooted, Split DNS: two DNS servers on one machine
converting v4 to v8, Converting BIND v4 to BIND v8 configuration
current origin, The db.127 file
db.127, The db.127 file
db.local, The db.local file
dialup, The options statement
directory, The options statement
exworks, Internal DNS
fetch-glue, Configuring the internal name server
file, Syntax
forward, The options statement
forward first;, The options statement
forward only;, The options statement
forwarders, Syntax, The options statement, Configuring DNS on liongate
heartbeat-interval, Limiting negotiations
hint, The hints file
jail, Configuring the internal name server
localhost, The db.local file
named.conf, The named.conf file
named.pid, Configuring the internal name server
options, The options statement
recursion, Configuring the internal name server
reload, The rndc program, Controlling named with a start/stop script
resolv.conf, Configuring the master on privdns
SIGHUP, Sending signals to named
slave, Alternatives
stand-alone master, Split DNS: stand-alone internal master
start, Controlling named with a start/stop script
stop, Controlling named with a start/stop script
version, The options statement
zone file, Predefined zone statements
{, Syntax
}, Syntax
BIOS, The bootstrap process
blacklisting, What are they?
blank, Write the CD-image to a CD
blowfish, The Client
boot, Configuring /etc/inittab
boot drive, The bootstrap process
boot option
initrd=, The bootprocess
boot sequence, The bootprocess
booting
(nothing), LILO errors
/boot/boot.0300, LILO backup files
/boot/boot.b, Booting from disk or partition, LILO backup files
/boot/map, Booting from disk or partition
/etc/fstab, Daemon initialization
/etc/inittab, Daemon initialization
/etc/lilo.conf, Booting from disk or partition
/etc/rc.d, Daemon initialization
/sbin/lilo, Booting from disk or partition, LILO backup files
10 bits, More about partitions tables
1024 cylinders, More about partitions tables
boot loader, Recognizing the four stages during boot
boot partition, Booting from disk or partition
boot sectors, Booting from disk or partition
bootloader, The bootstrap process
Bootmagic, Booting from disk or partition
BOOTP, Booting from CD-ROM and networks
bootsector, Booting from disk or partition
CDROM, Booting from CD-ROM and networks
choose device, Booting from CD-ROM and networks
CHS, Booting from disk or partition
daemon initialization, Recognizing the four stages during boot
debugging, A word of caution
DHCP, Booting from CD-ROM and networks
disk not supported, LILO errors
dmesg, Recognizing the four stages during boot
El Torito, Booting from CD-ROM and networks
fdisk, Booting from disk or partition
first 446 bytes, Booting from disk or partition
first stage loader, LILO backup files
floppy, Booting from disk or partition
four stages, Recognizing the four stages during boot
fsck, Daemon initialization
geometry mismatch, LILO errors
getty, Daemon initialization
GRUB, Kernel loading, Booting from disk or partition
hard disk, Booting from disk or partition
hardware initialization, Recognizing the four stages during boot
ignoring BIOS, More about partitions tables
init, Daemon initialization
initdefault, Daemon initialization
kernel, Kernel loading
kernel loading, Recognizing the four stages during boot
kernel location, Booting from disk or partition
L (error), LILO errors
L 01, LILO errors
LBA, More about partitions tables
LI, LILO errors
LIL, LILO errors
LIL-, LILO errors
LIL?, LILO errors
LILO, The bootstrap process, Kernel loading, Booting from disk or partition, LILO errors
LILO backup of bootsector, LILO backup files
LILO first stage, Booting from disk or partition
LILO in MBR, The LILO install locations
LILO in partition, The LILO install locations
LILO second stage, Booting from disk or partition
Linux, The bootstrap process
loader, Kernel loading
MBR, Booting from disk or partition
multi-user mode, Daemon initialization
next device, The bootstrap process
NFS, Booting from CD-ROM and networks
partition sector, Booting from disk or partition
partition table, Booting from disk or partition
ramdisk word, Kernel loading
ring buffer, Recognizing the four stages during boot
root filesystem, Kernel loading
runlevel, Daemon initialization
second stage boot loader, LILO backup files
single-user mode, Daemon initialization
startup message, Booting from disk or partition
sysinit, Daemon initialization
TFTP, Booting from CD-ROM and networks
UDP, Booting from CD-ROM and networks
bootloader, The bootstrap process
bootp, DHCP Configuration (2.210.1)
bootstrap process, The bootstrap process
bootwait, Configuring /etc/inittab
bounce attack, What is it?
broadcast, The company's shared-networks and subnets
broadcast address, Ethernet Interfaces
bugtraq, What is it?
subscription, Subscribing to the Bugtraq mailing list
unsubscribing, Unsubscribing from the Bugtraq mailing list
bus
EISA, Bus structures
ISA, Bus structures
MCA, Bus structures
PCI, Bus structures
SCSI, Write the CD-image to a CD
USB, USB devices
VESA, Bus structures
BUS, Write the CD-image to a CD
busmapping, Querying your PCI bus
bzImage, Different types of kernel images

C

caching-only nameserver, A caching-only named.conf file
Carnegie Mellon, What is it?
CD-ROM filesystem, Creating an image for a CD-ROM
cdrecord, Write the CD-image to a CD
CERT, What is it?
http://www.cert.org, Where is it?
majordomo@cert.org, How to subscribe to the CERT Advisory mailing list
subscribing, How to subscribe to the CERT Advisory mailing list
unsubscribe, How to unsubscribe to the CERT Advisory mailing list
Certificate Authority, Public key cryptography, How to create a SSL server Certificate
Certificate Signing Request, How to create a SSL server Certificate
CGI, Monitoring Apache load and performance, Configuring mod_perl
Challenge Handshake Authentication Protocol, Authentication with PPP
CHAP, PPP
chat, PPP Client
chfn, Shell startup environment
chsh, Login shells, Shell startup environment
CIAC, What is it?
BULLETIN, Subscribing to the mailing list
ciac-listproc@llnl.gov, Subscribing to the mailing list
http://www.ciac.org/ciac/, Where is it?
NOTES, Subscribing to the mailing list
SPI-ANNOUNCE, Subscribing to the mailing list
SPI-NOTES, Subscribing to the mailing list
subscribing, Subscribing to the mailing list
unsubscribe, Unsubscribing from the mailing list
COLUMNS, Core system variables
COM ports, setserial
Common Log Format, Apache access_log file
Common Name, How to create a SSL server Certificate
Configuring
Apache, Configuring Apache server options
Apache Authentication Modules, Configuring authentication modules
Apache mod_perl, Configuring mod_perl
Apache mod_php, Configuring mod_php support
apsfilter, Using a Windows printer from Linux
bind, DNS (2.207)
CRT devices, Configuring CRT devices
DHCP, DHCP Configuration (2.210.1)
disks, Configuring disks
filesystems, Configuring Filesystems
FreeS/WAN, IPSEC
FTP Server, Securing FTP servers (2.212.2)
harddisks, Configuring harddisks using hdparm
kernel modules, Configuring modules
LCD devices, Configuring LCD devices
LDAP, LDAP configuration (2.210.3)
LDAP Authentication, pam_ldap
Linux Kernel, Creating a .config file
Linux kernel options, Configuring kernel options
Logical Volume Manager, Configuring Logical Volume Management
Network Interface, Configuring the network interface
NFS, Setting up NFS
NIS Authentication, pam_nis
PAM, How does it work?
PCI devices, Configuring PCI devices
PortSentry, Installation and Configuration
PPP, Using Options Files
RAID, Configuring RAID (2.204.1)
Router, Configuring a router (2.212.1)
Samba, An example of the functionality we wish to achieve
serial devices, Serial devices
SMB Server, What is Samba? , NFS - The Network File System
Snort, What is it?
SSH, Configuring sshd
TCP Wrappers, TCP_wrappers (2.212.4)
USB devices, Configuring USB devices
Web Server, Implementing a Web Server (2.208.1)
CONFIG_KMOD, Enabling kmod
CONFIG_MODULES, Enabling kmod
cpio, Backup utilities
Creating
filesystem, Creating Filesystems
SSL Server Certificate, How to create a SSL server Certificate
Cricket, Monitoring Apache load and performance
CRT, Configuring CRT devices
crtscts, PPP Server
Cryptography
Public Key, Public key cryptography
CTRL-ALT-DEL, Configuring /etc/inittab
ctrl-alt-del, Setting kernel parameters
ctrlaltdel, Configuring /etc/inittab
custom kernel, Building A Custom Kernel
cylinder, Configuring disks
cylinder 0, The bootstrap process

D

dd, Making a copy of a data CD, Backup utilities
debugfs, Maintaining a Linux Filesystem (203.2)
default gateway, Routing Through a Gateway
default route, Routing Through a Gateway
deluser, Troubleshooting authorisation problems
depmod, Topics
device or resource busy, rmmod
DHCP, What is DHCP?
BOOTP, Static BOOTP hosts
Client, What is DHCP?
client identifier, Static hosts
default-lease-time, Leases
dhcpd.conf, How is the server configured?
dhcpd.leases, Leases
domain-name-servers, The global parameters for services
ethernet address, Static hosts
Global Parameters, What are (global) parameters?
group declaration, What is a group declaration?
host declaration, What is a host declaration?
IP-address, An example
max-lease-time, Leases
nntp-server, The global parameters for services
Normal Parameters, What are (global) parameters?
option, The global parameters for services
pop-server, The global parameters for services
relaying, What is DHCP-relaying?
reload, Reloading the DHCP-server after making changes
Server, What is DHCP?
shared network, What is a shared-network declaration?
smtp-server, The global parameters for services
Static Host, Static hosts
subnet declaration, What is a subnet declaration?
dhcrelay, What is DHCP-relaying?
dial-in, PPP
directory blocks, Filesystems
Disk, Where?
DMA, Configuring harddisks using hdparm
dmesg, Configuring disks
DNS, Name-server parts in BIND
DNS Lookup, Installation
documentation
/usr/doc, Getting help
/usr/man, Getting help
/usr/share/doc, Getting help
DOS Attacks, What they are
DOS extended partition, Extended partitions
DOS partition table, More about partitions tables
DSA-key, Server keys
dumpe2fs, Maintaining a Linux Filesystem (203.2), dumpe2fs
Dynamic Shared Objects, Run-time loading of modules (DSO)

I

ICMP, ping, The Firm's network with IPCHAINS
ECHO, Installation
ECHO REPLY, Installation
ID, Write the CD-image to a CD
IDE, Configuring disks
IDE Block Mode, Configuring harddisks using hdparm
IDE CD Writers, Configuring IDE CD burners
ide-scsi, Configuring IDE CD burners
IDS, What is it?
ifconfig, Configuring the network interface, ifconfig
IFS, Core system variables
IKE, IPSEC
indirection blocks, Filesystems
inetd, What do tcp wrappers do?
protocol, Configuring tcp wrappers
server program, Configuring tcp wrappers
server program parameters, Configuring tcp wrappers
service name, Configuring tcp wrappers
socket type, Configuring tcp wrappers
user, Configuring tcp wrappers
wait, Configuring tcp wrappers
inetd.conf, Configuring tcp wrappers
init
order of scripts, The /etc/init.d/rc script
init scripts, The /etc/init.d/rc script
init=/bin/sh, If you've lost the root password
initdefault, Configuring /etc/inittab , Daemon initialization
initial RAM disk, The initial ram disk (initrd)
initrd, Topics, The initial ram disk (initrd)
manual creation, Manual initrd creation
mkinitrd, Create initrd using mkinitrd
inode, Filesystems
INPUTRC, Shell startup environment
insmod, Topics, insmod
interval between checks, tune2fs
Intrusion Detection, What is it?
IP, Configuring the network interface
Category 1, Private Network Addresses
Category 2, Private Network Addresses
Category 3, Private Network Addresses
forwarding, IP forwarding with IPCHAINS
Masquerading, IP Masquerading with IPCHAINS
private, Private Network Addresses
public, Private Network Addresses
IP Addresses
automatic assignment, Choosing IP Addresses
ipchains, IP Masquerading with IPCHAINS
Checksum, IPCHAINS, an overview
Demasquerade, IPCHAINS, an overview
Routing decision, IPCHAINS, an overview
Sanity, IPCHAINS, an overview
IPCHAINS
ACCEPT, IPCHAINS, an overview
DENY, IPCHAINS, an overview
FORWARD, IPCHAINS, an overview
INPUT, IPCHAINS, an overview
MASQ, IPCHAINS, an overview
OUTPUT, IPCHAINS, an overview
REDIRECR, IPCHAINS, an overview
RETURN, IPCHAINS, an overview
ipchains-restore, Saving And Restoring Firewall Rules
ipchains-save, Saving And Restoring Firewall Rules
IPCP, PPP
IPSEC, VPN Types, IPSEC
IPTABLES, What is it?
iptables, What is it?
--state, Connection tracking: Stateful Firewalling
ACCEPT, Adding targets
adding matching modules, Adding matching modules
DNAT, Adding targets
DROP, Adding targets
ESTABLISHED, Connection tracking: Stateful Firewalling
filter, Tables and Chains
FORWARD, Tables and Chains
icmp, Adding matching modules
INPUT, Tables and Chains
INVALID, Connection tracking: Stateful Firewalling
ip_conntrack, Connection tracking: Stateful Firewalling
ip_conntrack_ftp, Connection tracking: Stateful Firewalling
limit, Adding matching modules
LOG, Adding targets
mac, Adding matching modules
mangle, Tables and Chains
MARK, Adding targets
mark, Adding matching modules
MASQUERADE, Adding targets
MIRROR, Adding targets
multiport, Adding matching modules
NAT, Tables and Chains
NEW, Connection tracking: Stateful Firewalling
NF_ACCEPT, Netfilter “hooks”
NF_DROP, Netfilter “hooks”
NF_QUEUE, Netfilter “hooks”
NF_REPEAT, Netfilter “hooks”
NF_STOLEN, Netfilter “hooks”
OUTPUT, Tables and Chains
owner, Adding matching modules
POSTROUTING, Tables and Chains
PREROUTING, Tables and Chains
QUEUE, Adding targets
REDIRECT, Adding targets
REJECT, Adding targets
RELATED, Connection tracking: Stateful Firewalling
RETURN, Adding targets
SNAT, Adding targets
state, Adding matching modules
targets, Adding targets
tcp, Adding matching modules
TOS, Adding targets
tos, Adding matching modules
udp, Adding matching modules
unclean, Adding matching modules
IPXCP, PPP
ISA, Bus structures
iso9660, Mounting and Unmounting
ISO9660, Creating an image for a CD-ROM

L

LBA, More about partitions tables
LCD, Configuring LCD devices
LCP, PPP Client
ld, How the dynamic linker locates shared objects
ld-linux.so, How the dynamic linker locates shared objects
ld.so, Shared libraries
LDAP
businessCategory, Configuring a directory hierarchy
core.schema, Configuring a directory hierarchy
country, Configuring a directory hierarchy
description, Configuring a directory hierarchy
destinationIndicator, Configuring a directory hierarchy
facsimileTelephoneNumber, Configuring a directory hierarchy
internationaliSDNNumber, Configuring a directory hierarchy
LDAP Data Interchange Format, Configuring a directory hierarchy
ldapadd, Configuring a directory hierarchy
ldapsearch, Configuring a directory hierarchy
LDIF, LDAP configuration (2.210.3)
localityName, Configuring a directory hierarchy
organization, Configuring a directory hierarchy
organizationUnit, Configuring a directory hierarchy
PAM, PAM authentication (2.210.2)
physicalDeliveryOfficeName, Configuring a directory hierarchy
postalCode, Configuring a directory hierarchy
postOfficeBox, Configuring a directory hierarchy
preferredDeliveryMethod, Configuring a directory hierarchy
registeredAddress, Configuring a directory hierarchy
RFC 2116, What is it?
RFC 2251, What is it?
schema, Configuring a directory hierarchy
searchGuide, Configuring a directory hierarchy
seeAlso, Configuring a directory hierarchy
stateOrProvinceName, Configuring a directory hierarchy
street, Configuring a directory hierarchy
telephoneNumber, Configuring a directory hierarchy
teletexTerminalIdentifier, Configuring a directory hierarchy
telexNumber, Configuring a directory hierarchy
userPassword, Configuring a directory hierarchy
x121Address, Configuring a directory hierarchy
ldconfig, ldconfig
ldd, How the dynamic linker locates shared objects
LD_LIBRARY_PATH, How the dynamic linker locates shared objects
LILO, Influencing the regular boot process , Configuring PCI devices, The bootstrap process, Kernel loading
ether=, If a device doesn't work
init=, If you've lost the root password
Linux, Topics
boot process, The Linux boot process can be logically divided into seven parts. They are as follows:
cleaning the kernel, Cleaning the kernel
compile, Topics
configure, Topics
CONFIG_IP_NF_CONNTRACK, What is it?
CONFIG_IP_NF_FILTER, What is it?
CONFIG_IP_NF_MATCH_STATE, What is it?
CONFIG_IP_NF_NAT, What is it?
directory structure, The File Hierarchy
disks, Configuring disks
file hierarchy, The File Hierarchy
init, The bootprocess
kernel documentation, Kernel Components (201.1)
kernel image, Kernel Components (201.1)
kernel modules, lsmod
kernel parameters, Passing parameters to the kernel
kernel patching, Patching a Kernel (201.3)
kernel sources, Getting the kernel sources
lockd, The lock daemon
Logical Volume Manager, Configuring Logical Volume Management
maximum kernel size, Different types of kernel images
NFS Client, Configuring the kernel for NFS
NFS Client v3, Configuring the kernel for NFS
NFS Server, Configuring the kernel for NFS
NFS Server v3, Configuring the kernel for NFS
system recovery, System recovery (202.2)
USB subsystem, Configuring USB devices
linux
support, Getting help
linuxrc, The bootprocess
lo, The Loopback Interface
Logical Volume, Configuring Logical Volume Management
login, Shell startup environment
LOGNAME, Core system variables
loop mount, Test the CD-image
loopback interface, The Loopback Interface
lost root password, If you've lost the root password
lpr, Using lpr
lsmod, Topics, lsmod
lspci, Querying your PCI bus
LUN, Write the CD-image to a CD
lvcreate, Configuring Logical Volume Management
lvm, Configuring Logical Volume Management
lvol, Configuring Logical Volume Management

N

named, Name-server parts in BIND
named-bootconf, Name-server parts in BIND
named.boot, Name-server parts in BIND
named.conf, Name-server parts in BIND
NAT, Network Address Translation (NAT)
ncd, Name-server parts in BIND
net.ipv4.ip_forward, Setting kernel parameters
netfilter, What is it?
hooks, Netfilter “hooks”
rules, Netfilter “hooks”
netmask, Ethernet Interfaces
Network, Where?
Network Address Translation, Network Address Translation (NAT)
network intrusion detection, Installation
network scanning, What is it?
NFS, The Loopback Interface, NFS - The Network File System
--all, The showmount command
--directories, The showmount command
--exports, The showmount command
-r, Activating an export list
-ua, Deactivating an export list
1024, NFS client: software and configuration
4096, NFS client: software and configuration
8192, NFS client: software and configuration
all_squash, Export options
bg, NFS client: software and configuration
client, Client, Server or both?
fg, NFS client: software and configuration
file handles, Best NFS version
firewall, Limiting access
hard, NFS client: software and configuration
intr, NFS client: software and configuration
kernel, Requirements for NFS
kernel space, The NFS daemon
mount, NFS client: software and configuration
NFSSVC_MAXBLKSIZE, NFS client: software and configuration
nfsvers=, NFS client: software and configuration
noatime, NFS client: software and configuration
noauto, NFS client: software and configuration
noexec, NFS client: software and configuration
nointr, NFS client: software and configuration
nosuid, NFS client: software and configuration
no_all_squash, Export options
no_root_squash, Export options
portmapper, Requirements for NFS
portmapper security, The portmapper
retry=, NFS client: software and configuration
ro, Export options, NFS client: software and configuration
root_squash, Export options
rpc.lockd, The nfs-utils package
rpc.mountd, The nfs-utils package
rpc.nfsd, The nfs-utils package
rpc.statd, The nfs-utils package
rsize, NFS client: software and configuration
rw, Export options, NFS client: software and configuration
securing, Securing NFS
server, Client, Server or both?
SIGHUP, The exportfs command
soft, NFS client: software and configuration
squashing, Export options
tcp, NFS client: software and configuration
timeo=, NFS client: software and configuration
udp, NFS client: software and configuration
user space, The NFS daemon
version 4, Best NFS version
without portmapper, The portmapper
wsize, NFS client: software and configuration
nfsstat, The nfsstat command
NIC address, What is a host declaration?
NIS, The Loopback Interface
nmap, What is it?
-P0, Using the nmap command
options, Using the nmap command
nsswitch.conf, Name-server parts in BIND
NULL Scan, What is it?

P

Packet Flooding, What they are
packet logging, Installation
PAGER, Core system variables
PAM
account, pam_unix
auth, pam_unix
login, How does it work?
nullok, pam_unix
optional, How does it work?
pam.conf, How does it work?
pam_ldap.so, pam_ldap
pam_nis.so, pam_nis
passwd, How does it work?
password, pam_unix
required, How does it work?
requisite, How does it work?
session, pam_unix
ssh, How does it work?
sufficient, How does it work?
try_first_pass, pam_unix
use_first_pass, pam_unix
panic, Customise, build and install a custom kernel and kernel modules (201.4)
PAP, PPP
partition, Filesystems, Configuring disks
4, Extended partitions
extended, Extended partitions
logical, Extended partitions
primary, Extended partitions
type, More about partitions tables
partition table entry, More about partitions tables
partition type
0 Empty , More about partitions tables
1 FAT12 , More about partitions tables
10 OPUS , More about partitions tables
11 Hidden FAT12 , More about partitions tables
12 Compaq diagnost , More about partitions tables
14 Hidden FAT16 <3 , More about partitions tables
16 Hidden FAT16 , More about partitions tables
17 Hidden HPFS/NTF , More about partitions tables
18 AST Windows swa , More about partitions tables
1b Hidden Win95 FA , More about partitions tables
1c Hidden Win95 FA , More about partitions tables
1e Hidden Win95 FA , More about partitions tables
2 XENIX root , More about partitions tables
24 NEC DOS , More about partitions tables
3 XENIX usr , More about partitions tables
3c Partition TypeMagic , More about partitions tables
4 FAT16 <32M , More about partitions tables
40 Venix 80286 , More about partitions tables
41 PPC PReP Boot , More about partitions tables
42 SFS , More about partitions tables
4d QNX4.x , More about partitions tables
4e QNX4.x 2nd part , More about partitions tables
4f QNX4.x 3rd part , More about partitions tables
5 Extended , More about partitions tables
50 OnTrack DM , More about partitions tables
51 OnTrack DM6 Aux , More about partitions tables
52 CP/M , More about partitions tables
53 OnTrack DM6 Aux , More about partitions tables
54 OnTrackDM6 , More about partitions tables
55 EZ-Drive , More about partitions tables
56 Golden Bow , More about partitions tables
5c Priam Edisk , More about partitions tables
6 FAT16 , More about partitions tables
61 SpeedStor , More about partitions tables
63 GNU HURD or Sys , More about partitions tables
64 Novell Netware , More about partitions tables
65 Novell Netware , More about partitions tables
7 HPFS/NTFS , More about partitions tables
70 DiskSecure Mult , More about partitions tables
75 PC/IX , More about partitions tables
8 AIX , More about partitions tables
80 Old Minix , More about partitions tables
81 Minix / old Lin , More about partitions tables
82 Linux swap , More about partitions tables
83 Linux , More about partitions tables
84 OS/2 hidden C: , More about partitions tables
85 Linux extended , More about partitions tables
86 NTFS volume set , More about partitions tables
87 NTFS volume set , More about partitions tables
9 AIX bootable , More about partitions tables
93 Amoeba , More about partitions tables
94 Amoeba BBT , More about partitions tables
a OS/2 Boot Manag , More about partitions tables
a0 IBM Thinkpad hi , More about partitions tables
a5 BSD/386 , More about partitions tables
a6 OpenBSD , More about partitions tables
a7 NeXTSTEP , More about partitions tables
b Win95 FAT32 , More about partitions tables
b7 BSDI fs , More about partitions tables
b8 BSDI swap , More about partitions tables
c Win95 FAT32 (LB , More about partitions tables
c1 DRDOS/sec (FAT- , More about partitions tables
c4 DRDOS/sec (FAT- , More about partitions tables
c6 DRDOS/sec (FAT- , More about partitions tables
c7 Syrinx , More about partitions tables
db CP/M / CTOS / . , More about partitions tables
e Win95 FAT16 (LB , More about partitions tables
e1 DOS access , More about partitions tables
e3 DOS R/O , More about partitions tables
e4 SpeedStor , More about partitions tables
eb BeOS fs , More about partitions tables
f Win95 Ext'd (LB , More about partitions tables
f1 SpeedStor , More about partitions tables
f2 DOS secondary , More about partitions tables
f4 SpeedStor , More about partitions tables
fd Linux raid auto , More about partitions tables
fe LANstep , More about partitions tables
ff BBT , More about partitions tables
Password Authentication Protocol, Authentication with PPP
patch, Topics, Patching a Kernel (201.3), Patching a kernel
--quiet, Patching a kernel
--remove-empty-files, Patching a kernel
--reverse, Patching a kernel
--silent, Patching a kernel
--strip, Patching a kernel
-E, Patching a kernel
-p, Patching a kernel
-R, Patching a kernel
-s, Patching a kernel
patch level, Identifying stable and development kernels and patches
PATH, Core system variables
PC bus, Bus structures
PCI, Bus structures
bridges, Querying your PCI bus
bus latency timer, PCI latency timers
Local Bus, Bus structures
PEM, How to create a SSL server Certificate
PHP, Configuring mod_php support
Physical Extents, Configuring Logical Volume Management
Physical Volume, Configuring Logical Volume Management
ping, ifconfig
ping sweep, What is it?
PKC, Public key cryptography
Plug and Play, Plug and play
Port redirection, Port Redirection with IPCHAINS
Port Scans, Description
PortSentry, Description
portsentry
-atcp, Installation and Configuration
-audp, Installation and Configuration
-stcp, Installation and Configuration
-sudp, Installation and Configuration
-tcp, Installation and Configuration
-udp, Installation and Configuration
advanced logic mode, Installation and Configuration
portsentry.conf, Installation and Configuration
powerd, powerd
powerfail, Configuring /etc/inittab
powerfailnow, Configuring /etc/inittab
powerokwait, Configuring /etc/inittab
powerwait, Configuring /etc/inittab
PPP, Routing Through a Gateway, PPP
Account, PPP Server
Client, PPP Client
Server, PPP Server
ppp0, PPP Client
pppd, PPP
Print Services for Unix, Using lpr
printcap, Using a Windows printer from Linux
printers, Using Samba
Private Network Addresses, Private Network Addresses
procfs, Setting kernel parameters
proper editor, Editors
PS1, Core system variables
PS2, Core system variables
PS3, Core system variables
PS4, Core system variables

R

RAID, What is RAID?
0, RAID levels
1, RAID levels
4, RAID levels
5, RAID levels
hardware, Hardware RAID
Linear, RAID levels
software, Software RAID
raidstart, Configuring RAID (using mdadm)
readline, Shell startup environment
reboot, What happens next, what does /sbin/init do?
removing a patch, Removing a kernel patch from a production kernel
reserved blocks, tune2fs
respawn, Configuring /etc/inittab
reverse zone, Zones and reverse zones
reverse-ident, What is it?
RFC1256, The Firm's network with IPCHAINS
RFC1631, Network Address Translation (NAT)
RFC2827, What they are
RFC792, The Firm's network with IPCHAINS
RFC950, The Firm's network with IPCHAINS
RJ45, Multiport boards
RLL, Configuring harddisks using hdparm
rmmod, Topics, rmmod
rndc, The rndc program
Rockridge, Creating an image for a CD-ROM
rogue host, arp and arpwatch
ROM, The bootstrap process
root filesystem
Linux, Manual initrd creation
route, Configuring the network interface, route, IP Masquerading with IPCHAINS
routed, What it is
routing, Routing Through a Gateway
routing table, Configuring the network interface
ROWS, Core system variables
RPC, The Loopback Interface, Configuring the kernel for NFS
rpcinfo, rpcinfo
RRDtool, Monitoring Apache load and performance
RSA, How to create a SSL server Certificate
RSA-key, Server keys
Rsync, Backup utilities
runlevel, What happens next, what does /sbin/init do?
runlevel 1, What happens next, what does /sbin/init do?
runlevel 2-5, What happens next, what does /sbin/init do?
runlevel 6, What happens next, what does /sbin/init do?
runlevel s, What happens next, what does /sbin/init do?
runlevel S, What happens next, what does /sbin/init do?

S

Samba, What is Samba?
samba
%S, Accessing Samba shares from Windows 2000
download, With smbclient
get, With smbclient
global, Accessing Samba shares from Windows 2000
homes, Accessing Samba shares from Windows 2000
inetd, Installing the Samba components
logon scripts, Creating logon scripts for clients
messaging, Sending a message with smbclient
mget, With smbclient
MS Windows quirk, Making the second connection from Windows 2000
nmbd, Installing the Samba components
nmblookup, Using nmblookup to test the WINS Server
password, Making the first connection from Windows 2000
path, Using Samba
port 137, Installing the Samba components
port 139, Installing the Samba components
printers, Accessing Samba shares from Windows 2000
printing, Using Samba
smb.conf, Accessing Samba shares from Windows 2000
smbd, Installing the Samba components
smbmount, With smbmount
smbpasswd, Installing the Samba components
smbspool, Using a Windows printer from Linux
smbstatus, Making the first connection from Windows 2000
username, Making the first connection from Windows 2000
WINS, Using Samba as a WINS Server
scp, What are ssh and sshd?
SCSI, Write the CD-image to a CD, Hardware RAID
SCSI CD Writers, Configuring IDE CD burners
SCSI Hostadapter Emulation, Configuring IDE CD burners
sector 0, The bootstrap process
sector 0 of kernel, Kernel loading
Secure Shell, Secure shell (OpenSSH) (2.212.3)
security alerts, What are they?
security vulnerabilities, What is it?
securityfocus, Where is it?
SEI, What is it?
serial devices, Serial devices
Server Message Block protocol, What is Samba?
set, Core system variables
set -o noclobber, Shell startup environment
set -o vi, Shell startup environment
setserial, setserial
shared libraries, Shared libraries
shared objects
-Ldir, How the dynamic linker locates shared objects
/etc/ld.so.cache, How the dynamic linker locates shared objects
/etc/ld.so.conf, ldconfig
dynamic section, ldconfig
ld -rpath, How the dynamic linker locates shared objects
ldconfig, ldconfig
ldconfig -p, How the dynamic linker locates shared objects
ldd, How the dynamic linker locates shared objects
LD_LIBRARY_PATH, How the dynamic linker locates shared objects
libc5, ldconfig
libc6, ldconfig
linkname, Naming schemes for shared objects
locating, How the dynamic linker locates shared objects
major number, Shared object version numbering
minor number, Shared object version numbering
naming schemes, Naming schemes for shared objects
objdump, ldconfig
patchlevel, Shared object version numbering
real name, Naming schemes for shared objects
soname, Naming schemes for shared objects
upgrading, Naming schemes for shared objects
version numbering, Shared object version numbering
SHELL, Core system variables
shell, Shell startup environment
SHLVL, Core system variables
showmount, Exporting filesystems, The showmount command, The showmount --exports command
single user mode, Booting into single user mode or a specific runlevel
SLIP, PPP
SMB, What is Samba?
smbclient, An example of the functionality we wish to achieve , With smbclient
smbmount, With smbmount
snapshots, Configuring Logical Volume Management
sniffer, Installation
sniffing, What don't tcp wrappers do?
snort, What is it?
rules, Configuration
software RAID, Software RAID
Split DNS, Split DNS: two DNS servers on one machine
split-level DNS, Internal DNS
squid, squid
-k reconfigure, squid
ACL, Access policies
authentication, Authenticators
auth_param, squid
cache_dir, squid
cache_mem, Utilizing memory usage
cache_swap, Utilizing memory usage
deny access, Redirectors
http_access, squid
http_access allow, Access policies
http_access deny, Access policies
http_port, squid
maximum_object_size, Utilizing memory usage
minimum_object_size, Utilizing memory usage
redirector, Redirectors
redirect_program, squid
squid.conf, Access policies
SSL, squid
StoreEntry, Utilizing memory usage
srm.conf, Installing the Apache web-server
SSH, VPN Types, Secure shell (OpenSSH) (2.212.3)
ssh, What are ssh and sshd?
.rhosts, Server keys , The .rhosts and .shosts files
.shosts, The .rhosts and .shosts files
AllowGroups, Allow or deny non-root logins
AllowUsers, Allow or deny non-root logins
authorized_keys, User keys, public and private
background tunnel, Tunneling an application protocol over ssh with portmapping
Blowfish, Server keys
DenyGroups, Allow or deny non-root logins
DenyUsers, Allow or deny non-root logins
forced-commands-only, Allow or deny root logins
gnome-ssh-askpass, Enabling X-sessions
id_dsa, User keys, public and private
id_dsa.pub, User keys, public and private
keys, Keys and their purpose
no, Allow or deny root logins
PermitRootLogin, Allow or deny root logins
protocol version 1, Server keys
protocol version 2, Server keys
RSA, Server keys
Server Keys, Server keys
smtp, Tunneling an application protocol over ssh with portmapping
ssh-add, Login session
ssh-agent, Configuring the ssh-agent
ssh-askpass, Enabling X-sessions
SSH_AGENT_PID, Login session
The X Window System, Enabling or disabling X forwarding
tunnel, Tunneling an application protocol over ssh with portmapping
User Keys, User keys, public and private
without-password, Allow or deny root logins
X Sessions, Enabling X-sessions
X11DisplayOffset, Enabling or disabling X forwarding
X11Forwarding, Enabling or disabling X forwarding
XAuthLocation, Enabling or disabling X forwarding
ssh-keygen, User keys, public and private
sshd, What are ssh and sshd?
sshd_config, Configuring sshd
SSL, Encrypted webservers: SSL
Stateful Firewall, Connection tracking: Stateful Firewalling
static libraries, Shared libraries
strace, Troubleshooting tools
striping, RAID levels
superblock, Filesystems
superblock location, debug2fs
support
debian, Getting help
mandrake, Getting help
Red Hat, Getting help
SuSE, Getting help
swap, Swap
swapon, Swap
SYN, Description
SYN sweep, What is it?
sysctl, Using sysctl, Setting kernel parameters
sysctl -a, Setting kernel parameters
sysinit, Configuring /etc/inittab

T

Tape, Where?
Tar, Backup utilities
TCP SYN, What is it?
tcp wrapper, Securing the portmapper
tcp wrappers, What do tcp wrappers do?
tcpd, What do tcp wrappers do?
tcpdump, tcpdump, What is it?
telnet, The Loopback Interface
TERM, Core system variables
testing a firewall, What is it?
The X Window System, Configuring CRT devices
time-to-live, Routing Through a PPP Link
TIME_EXCEEDED, traceroute
TLS, Encrypted webservers: SSL
TMPDIR, Core system variables
traceroute, route
transparent proxy, Web-caches
Triple-DES, How to create a SSL server Certificate
troubleshooting
/etc/group, Troubleshooting authorisation problems
/etc/inittab, Troubleshooting /etc/inittab and /sbin/init
/etc/lilo.conf, Resolving initial boot problems
/etc/login.defs, Troubleshooting /etc/login.defs
/etc/modules.conf, Troubleshooting tools
/etc/passwd, Troubleshooting authorisation problems
/etc/profile, Troubleshooting /etc/profile
/etc/rc.boot, Troubleshooting /etc/rc.local or /etc/rc.boot
/etc/rc.d/bcheckrc, Troubleshooting /etc/rc.local or /etc/rc.boot
/etc/rc.d/local, Troubleshooting /etc/rc.local or /etc/rc.boot
/etc/rc.local, Troubleshooting /etc/rc.local or /etc/rc.boot
/etc/rc?.d, Troubleshooting /etc/inittab and /sbin/init
/etc/sh.conf, Troubleshooting /etc/`shell_name`.conf
/etc/shadow, Troubleshooting authorisation problems
/etc/syslog.conf, Troubleshooting /etc/syslog.conf
/proc, Troubleshooting tools
/proc/interrupts, Resolving IRQ/DMA conflicts
/proc/pci/, Resolving IRQ/DMA conflicts
/sbin/init, Troubleshooting /etc/inittab and /sbin/init
1024 cylinder boundary, Resolving initial boot problems
131072K, Resolving kernel boot problems
1700-1791, Resolving initial boot problems
64MB, Resolving kernel boot problems
adding a drive, Resolving initial boot problems
AT E, Troubleshooting /etc/inittab and /sbin/init
AT Q, Troubleshooting /etc/inittab and /sbin/init
authorisation, Troubleshooting authorisation problems
bad cabling, Resolving initial boot problems
blocking traffic, An example situation
booting problems, Resolving initial boot problems
boottime scripts, Troubleshooting /etc/inittab and /sbin/init
cannot login, Troubleshooting authorisation problems
carrier detect, Troubleshooting /etc/inittab and /sbin/init
components involved, An example situation
connector seating, Resolving initial boot problems
cost effectiveness, A word of caution
cron, Troubleshooting cron processes
deactivate PNP, Resolving initial boot problems
default runlevel, Troubleshooting /etc/inittab and /sbin/init
depmod, Troubleshooting tools
Disk Controller Error, Resolving initial boot problems
disk geometry, Resolving initial boot problems
dmesg, Troubleshooting tools
environment variables, Core system variables
export, Core system variables
fdisk, Resolving initial boot problems
firewall, An example situation
first step, An example situation
fsck, Resolving initial boot problems
fuser, Troubleshooting tools
getting help, Getting help
getty respawning too fast, Troubleshooting /etc/inittab and /sbin/init
hardware problems, Resolving initial boot problems
HOP, An example situation
ICMP, An example situation
IDE, Resolving initial boot problems
insmod, Troubleshooting tools
IRQ/DMA, Resolving kernel boot problems
IRQ/DMA conflicts, Resolving IRQ/DMA conflicts
LILO, Resolving initial boot problems
lsdev, Resolving IRQ/DMA conflicts, Troubleshooting tools
lsmod, Troubleshooting tools
lsof, Troubleshooting tools
lspci, Resolving IRQ/DMA conflicts, Troubleshooting tools
ltrace, Troubleshooting tools
MBR, Resolving initial boot problems
modem, Troubleshooting /etc/inittab and /sbin/init
modprobe, Troubleshooting tools
networks, Something on network troubleshooting in general
No Fixed Disk Found, Resolving initial boot problems
PANIC, Resolving kernel boot problems
physical problem, An example situation
ping, An example situation
Plug And Play, Resolving initial boot problems
rdev, Resolving initial boot problems
rescue disk, Resolving initial boot problems
routing, An example situation
SCSI, Resolving initial boot problems
setup BIOS, Resolving initial boot problems
strace, Troubleshooting tools
strings, Troubleshooting tools
tools, Troubleshooting tools
traceroute, An example situation
UDMA, Resolving initial boot problems
uname, Troubleshooting tools
VFS unable to mount root fs, Resolving kernel boot problems
TTL, traceroute, The Firm's network with IPCHAINS
tune2fs, Maintaining a Linux Filesystem (203.2), tune2fs
tunefs
-c, tune2fs
-C, tune2fs
-i, tune2fs
-m, tune2fs
-r, tune2fs
tunnel, What Is A VPN
tunneling over ssh, Tunneling an application protocol over ssh with portmapping
Copyright Snow B.V. The Netherlands