Configuring network settings and server roles in Linux is a critical skill for cyber security professionals in Kenya, where secure and reliable network infrastructures underpin organizational operations. Proper network configuration ensures systems communicate effectively while maintaining robust defenses against cyber threats. This chapter focuses on practical approaches to managing IP addressing, DNS settings, and deploying DHCP and DNS servers in Linux environments, all essential for securing networks in institutions such as county government offices and financial institutions.

6.1 Configuring IP Addresses and DNS

Configuring IP addresses and DNS in Linux involves managing how a system identifies itself on a network and resolves domain names to IP addresses. In Kenya's dynamic cyber security landscape, where organizations rely heavily on stable network configurations, mastery of tools like netplan, nmcli, and resolv.conf is vital. These tools allow administrators to tailor network settings to meet security policies and operational requirements.

6.1.1 Using netplan, nmcli, and resolv.conf

Linux offers multiple methods for configuring network settings, each suited to different distributions and use cases. Netplan simplifies network configuration on modern Ubuntu systems by using YAML files, nmcli provides a command-line interface for NetworkManager allowing granular control, while resolv.conf manages DNS resolution. Proficiency in these tools enables cyber security specialists to ensure resilient and secure network connectivity.

Configuring IP Addresses with netplan

Netplan uses declarative YAML files to configure network interfaces, streamlining IP address management. This approach is common in Ubuntu Server editions used in Kenyan financial institutions for secure server deployments.

• YAML Configuration Files: Netplan configuration files reside in /etc/netplan/ and define network interfaces, IP addresses, gateways, and DNS servers in a human-readable format.
• Static IP Setup: Assigning static IP addresses is essential for servers hosting critical services, preventing IP changes that could disrupt security monitoring or access controls.
• DHCP Configuration: Netplan can enable DHCP for dynamic IP allocation, useful for client machines or less critical servers within a secure subnet.
• Applying Changes: After editing YAML files, the command sudo netplan apply activates the new settings without rebooting, minimizing downtime.
• Error Handling: YAML syntax errors can prevent network connectivity; careful validation is necessary before applying configurations.

Managing Network Settings with nmcli

The nmcli tool interfaces with NetworkManager, providing a versatile command-line method to configure network parameters dynamically, which is crucial for cyber security professionals managing remote or automated configurations.

• Connection Profiles: nmcli manages multiple connection profiles, each capable of storing IP, DNS, and routing information for different network environments.
• Static and Dynamic IP Assignment: Commands such as nmcli con mod allow switching between DHCP and static IPs without manual file edits.
• DNS Configuration: nmcli can update DNS settings on the fly, critical when responding to DNS-based attacks or changing network policies.
• Monitoring and Troubleshooting: nmcli provides real-time status and logs, aiding in rapid diagnosis of network issues during security incidents.
• Scripting and Automation: nmcli commands integrate well with shell scripts for automated network configuration in large-scale deployments like county government networks.

Editing resolv.conf for DNS Resolution

The /etc/resolv.conf file specifies DNS servers used by the system for name resolution. Managing this file correctly is fundamental for ensuring that domain queries are securely and accurately resolved.

• DNS Server Specification: The file lists nameserver entries, each specifying an IP address of a DNS resolver, which can be local or external.
• Search Domains: The search directive allows appending domain suffixes to queries, simplifying access to internal resources within organizations like hospitals.
• Static vs Dynamic Updates: Some systems regenerate resolv.conf dynamically via DHCP clients or NetworkManager; understanding this prevents overwriting manual settings.
• Security Considerations: Using trusted DNS servers and preventing unauthorized modifications to resolv.conf reduces risks of DNS spoofing and cache poisoning.
• Persistent Configuration: Techniques such as configuring NetworkManager or DHCP client hooks ensure resolv.conf maintains intended DNS settings after reboots or network changes.

Chapter Summary

This chapter explored the essential steps in configuring network settings and server roles within a Linux environment. It began with methods for setting IP addresses and DNS, focusing on tools such as netplan, nmcli, and the resolv.conf file to establish reliable network connectivity. The discussion then moved to setting up Linux-based DHCP and DNS servers, enabling dynamic IP allocation and efficient domain name resolution. Webserver configuration was covered in detail, highlighting the setup of Apache and Nginx servers along with virtual hosting to support multiple websites on a single machine. Firewall and port management were examined through the use of iptables, UFW, and firewalld to secure network traffic and control access. Finally, SSH configuration was addressed with an emphasis on hardening remote access to ensure secure and manageable connections to Linux servers. This comprehensive overview equips students with practical skills for managing Linux network and server environments effectively.