산특 > 기수 > 6기

enable
show ip interface brief
configure terminal
interface FastEthernet0
ip address 100.100.100.254 255.255.255.0
no shutdown
exit
interface Serial0
ip address 10.10.10.1 255.255.255.252
clock rate 64000
no shutdown
exit
ip routing
router ospf 1
router-id 10.10.10.1
network 10.10.10.0 0.0.0.3 area 0
network 100.100.100.0 0.0.0.255 area 0
exit
end
clear ip ospf process
show ip interface brief
show ip route

enable
show ip interface brief
configure terminal
interface FastEthernet0
ip address 125.246.95.254 255.255.255.0
no shutdown
exit
interface serial 0
ip address 10.10.10.2 255.255.255.252
no shutdown
exit
ip routing
router ospf 1
router-id 10.10.10.2
network 10.10.10.0 0.0.0.3 area 0
network 125.246.95.0 0.0.0.255 area 0
exit
end
clear ip ospf process
show ip interface brief
show ip route

20260701수요일 중간평가
시험 시작 : 09:30 ~
1. VirtualBox의 연습용 서버를 init로 되돌리고 아래의 모든 설정(2~8)을 끝내고 GNS3 설정에 맞게 네트워크를 변경한다.

2. 서버에 아래 설정파일에 있는 프로그램을 설치한다.
3. sdb,sdc,sdd를 LVM으로 설정하고 /home으로 연결한다.
4. 호스팅 파일을 만들고 기본 설정을 /home/master/public_html으로 설정한다.
5. 94번에 저장된 백업 파일을 본인의 public_html에 저장한다.
6. cron을 이용해 백업과 rsync적용하기
7. rsyslog파일을 만들고 백업 되도록 설정할것
8. 아래 설정 파일과 본인의 노트를 참고하여 짝궁과 협업후 완벽하게 마무리 할 수 있도록 한다.

수요일 평가 시험 설정파일

---

sudo apt -y update
sudo apt -y upgrade
sudo apt -y install net-tools
sudo apt -y install unzip
sudo apt -y install lrzsz
sudo apt -y install vsftpd
sudo apt -y install openssh-server
sudo apt -y install inetutils-telnetd
sudo apt -y install postfix
sudo apt -y install sendmail
sudo apt -y install dovecot-pop3d
sudo apt -y install dovecot-imapd
sudo apt -y install nfs-kernel-server
sudo apt -y install bind9 bind9utils
sudo apt -y install lamp-server^
sudo apt -y install roundcube
sudo apt -y install isc-dhcp-server
sudo apt -y install squid
sudo apt -y install isc-dhcp-server tftpd-hpa inetutils-inetd vsftpd pxelinux
#zabbix
sudo apt -y install apt-transport-https ca-certificates curl gnupg-agentsoftware-properties-common
wget https://repo.zabbix.com/zabbix/7.0/ubuntu/pool/main/z/zabbix-release/zabbix-release_7.0-1+ubuntu24.04_all.deb
sudo dpkg -i zabbix-release_7.0-1+ubuntu24.04_all.deb
sudo apt update
sudo apt -y install zabbix-agent2
#ELK7
curl -fsSL https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo gpg --dearmor -o /usr/share/keyrings/elastic.gpg
echo "deb [signed-by=/usr/share/keyrings/elastic.gpg] https://artifacts.elastic.co/packages/7.x/apt stable main" | sudo tee /etc/apt/sources.list.d/elastic-7.x.list
sudo apt update
sudo apt -y install packetbeat

---

라우터 설정
R2#config t
hostname JJCOM
exit
show ip interface (5)
FastEthernet0/0 : 125.246.95.254
#R2
config t
interface FastEthernet0/0
ip address 125.246.95.254 255.255.255.0
no shutdown
exit
interface Serial1/1
ip address 1.1.1.2 255.255.255.252
no shutdown
exit
interface Serial1/0
ip address 2.2.2.1 255.255.255.252
no shutdown
ip route 100.100.100.0 255.255.255.0 1.1.1.1
ip route 168.126.63.0 255.255.255.0 2.2.2.2
#R1
config t
hostname HACKER
interface FastEthernet0/0
ip address 100.100.100.254 255.255.255.0
no shutdown
exit
interface Serial1/0
ip address 1.1.1.1 255.255.255.252
no shutdown
exit
interface Serial1/1
ip address 3.3.3.2 255.255.255.252
no shutdown
ip route 125.246.95.0 255.255.255.0 1.1.1.2
ip route 168.126.63.0 255.255.255.0 3.3.3.1
#R3
config t
hostname DNS
config t
interface FastEthernet0/0
ip address 168.126.63.254 255.255.255.0
no shutdown
exit
interface Serial1/0
ip address 3.3.3.1 255.255.255.252
no shutdown
exit
interface Serial1/1
ip address 2.2.2.2 255.255.255.252
no shutdown
ip route 125.246.95.0 255.255.255.0 2.2.2.1
ip route 100.100.100.0 255.255.255.0 3.3.3.2

---

kali한글 패치

---

접속 IP: 192.168.0.XXX
게이트웨이 : 192.168.0.1
DNS : 192.168.0.99
리눅스 IP : 10.0.0.2.15(NAT)
게이트웨이 10.0.2.1
DNS : 192.168.0.99
NAT : 포트포워딩(21,22,25,80,53,110,143,443,445,3306,9200)

---

1. VirtualBox를 이용해서 Ubuntu24.04를 설치한다.
2. 설치후 스냅샵 만들기
3. 업데이트와 기본 유틸 설치하기
sudo cat /etc/*release*
sudo apt update
sudo apt -y upgrade
sudo apt -y full-upgrade
sudo apt -y install net-tools
sudo apt -y install unzip
sudo apt -y install lrzsz
sudo apt -y install curl
4. 하드 디스크 확인후 /home을 LVM에 연결하기
cd /etc/skel
mkdir public_html
cd public_html
mkdir logs
cd logs
touch access.log
touch error.log
cd ..
CodeIgniter 다운받기
unzip codeigniter4-framework-v4.7.3-0-gab9bf33.zip
mv codeigniter4-framework-v4.7.3-0-gab9bf33 CI4
cd ~
mkdir public_html
cd public_html
mkdir logs
cd logs
touch access.log
touch error.log
cd /home
sudo tar zxvf home.tar.gz ./
sudo mkdir /backup
mv home.tar.gz /backup
lsblk
sudo apt -y install lvm2
sudo systemctl enable --now lvm2-monitor
sudo systemctl status lvm2-monitor
sudo pvcreate /dev/sdd /dev/sde /dev/sdf
sudo vgcreate vg_data /dev/sdd /dev/sde /dev/sdf
sudo lvcreate -l 100%FREE -n lv_storage vg_data
sudo mkfs.ext4 /dev/vg_data/lv_storage
sudo nano /etc/fstab
/dev/vg_data/lv_storage /home ext4 defaults 0 0
cp /backup/home.tar.gz /home
cd /home
tar zxvf home.tar.gz
5. 웹서버 설치후 웹 설정하기
sudo apt -y install apache2
sudo apt -y install php8.3 php8.3-mbstring php-pear
php -v
sudo apt -y install php8.3-fpm
sudo apt -y install mariadb-server
sudo a2enmod proxy_fcgi setenvif
sudo a2enconf php8.3-fpm
sudo a2enmod userdir
sudo systemctl restart php8.3-fpm apache2
chmod 711 /home/master
chmod 755 /home/master/public_html
sudo adduser exam
sudo nano /etc/apache2/sites-available/hosting.conf
VirtualHost *:80>
DocumentRoot /home/master/public_html/CI4/public
ServerName exam.lsw.kr
ServerAdmin webmaster@ci4.lsw.kr
Directory /home/master/public_html/CI4/public>
AllowOverride All
Require all granted
/Directory>
ErrorLog /home/master/public_html/logs/error.log
CustomLog /home/master/public_html/logs/access.log combined
/VirtualHost>
cd /etc/mysql/mariadb.conf.d/
sudo nano 50-server.cnf
bind-address = 0.0.0.0
sudo systemctl restart mysql
sudo mysql
create database master;
CREATE USER 'master'@'localhost' IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON master.* TO 'master'@'localhost';
flush privileges;
CREATE USER 'master'@'192.168.0.XXX' IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON master.* TO 'master'@'192.168.0.XXX';
flush privileges;
6. 백업 및 보안 조치
cd /home/master
nano backup.sh
#!/bin/bash
# ===== 설정 =====
SOURCE_DIR="/home/master/public_html" # 백업할 디렉터리
BACKUP_DIR="/backup/master" # 백업 저장 위치
RETENTION_DAYS=30 # 보관 기간(일)
# ===== 변수 =====
DATE=$(date +"%Y-%m-%d_%H-%M-%S")
BACKUP_FILE="$BACKUP_DIR/backup_$DATE.tar.gz"
# ===== 백업 디렉터리 생성 =====
mkdir -p "$BACKUP_DIR"
# ===== 백업 수행 =====
echo "[$(date)] 백업 시작"
tar -czf "$BACKUP_FILE" "$SOURCE_DIR"
if [ $? -eq 0 ]; then
echo "[$(date)] 백업 성공: $BACKUP_FILE"
else
echo "[$(date)] 백업 실패"
exit 1
fi
# ===== 오래된 백업 삭제 =====
find "$BACKUP_DIR" -name "backup_*.tar.gz" -type f -mtime +$RETENTION_DAYS -delete
echo "[$(date)] 오래된 백업 정리 완료"
echo "[$(date)] 작업 종료"

데이터베이스 백업 추가
#!/bin/bash
#############################
# 백업 설정 #############################
# 웹 파일
SOURCE_DIR="/home/master/public_html"
# 백업 저장 위치
BACKUP_DIR="/backup/master"
# MySQL 정보
DB_HOST="localhost"
DB_PORT="3306"
DB_USER="root"
DB_PASS="비밀번호"
DB_NAME="데이터베이스명"
# 백업 보관 기간
RETENTION_DAYS=30
#############################
# 변수
#############################
DATE=$(date +"%Y-%m-%d_%H-%M-%S")
WEB_BACKUP="$BACKUP_DIR/web_$DATE.tar.gz"
DB_BACKUP="$BACKUP_DIR/db_$DATE.sql"
DB_BACKUP_GZ="$BACKUP_DIR/db_$DATE.sql.gz"
#############################
# 백업 디렉터리 생성
#############################
mkdir -p "$BACKUP_DIR"
echo "==============================="
echo "[$(date)] 백업 시작"
echo "==============================="
#############################
# 웹 파일 백업
#############################
echo "[1/3] 웹 파일 백업..."
tar -czpf "$WEB_BACKUP" "$SOURCE_DIR"
if [ $? -eq 0 ]; then
echo "웹 백업 성공"
else
echo "웹 백업 실패"
exit 1
fi
#############################
# 데이터베이스 백업
#############################
echo "[2/3] 데이터베이스 백업..."
mysqldump \
-h"$DB_HOST" \
-P"$DB_PORT" \
-u"$DB_USER" \
-p"$DB_PASS" \
--single-transaction \
--routines \
--triggers \
--events \
"$DB_NAME" > "$DB_BACKUP"
if [ $? -eq 0 ]; then
gzip "$DB_BACKUP"
echo "DB 백업 성공"
else
echo "DB 백업 실패"
exit 1
fi
#############################
# 오래된 백업 삭제
#############################
echo "[3/3] 오래된 백업 삭제..."
find "$BACKUP_DIR" -type f -mtime +$RETENTION_DAYS \
\( \
-name "web_*.tar.gz" -o \
-name "db_*.sql.gz" \
\) -delete
echo "오래된 백업 삭제 완료"
echo "==============================="
echo "백업 완료"
echo "웹 백업 : $WEB_BACKUP"
echo "DB 백업 : $DB_BACKUP_GZ"
echo "==============================="
chmod 777 backup.sh
sudo ./backup.sh
sudo nano /etc/hosts.allow
sshd : 본인IP
sshd : 192.168.0.233
sudo nano /etc/hosts.deny
ALL : ALL
자동화
sudo nano /etc/crontab
0 2 * * * root /home/master/backup.sh
1 2 * * * root /home/kbc/backup.sh
2 2 * * * root /home/ksy/backup.sh
3 2 * * * root /home/kjb/backup.sh
4 2 * * * root /home/khe/backup.sh
5 2 * * * root /home/pgj/backup.sh
6 2 * * * root /home/psc/backup.sh
7 2 * * * root /home/pjy/backup.sh
8 2 * * * root /home/ssm/backup.sh
9 2 * * * root /home/aes/backup.sh
10 2 * * * root /home/yg/backup.sh
11 2 * * * root /home/lcj/backup.sh
12 2 * * * root /home/jsy/backup.sh
13 2 * * * root /home/jwj/backup.sh
14 2 * * * root /home/jjh/backup.sh
#add(remote)
15 2 * * * root rsync -avz --exclude-from=/etc/rsync_exclude.lst /backup/ 192.168.0.94::ip029

---

7. 중앙서버로 로그 보내기
cd /etc/rsyslogd.d
sudo nano r.conf
# /etc/rsyslog.conf configuration file for rsyslog
# # For more information install rsyslog-doc and see
# /usr/share/doc/rsyslog-doc/html/configuration/index.html
#
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf
#################
#### MODULES ####
#################
module(load="imuxsock") # provides support for local system logging
#module(load="immark") # provides --MARK-- message capability
# provides UDP syslog reception
#module(load="imudp")
#input(type="imudp" port="514")
# provides TCP syslog reception
#module(load="imtcp")
#input(type="imtcp" port="514")
# provides kernel logging support and enable non-kernel klog messages
module(load="imklog" permitnonkernelfacility="on")
###########################
#### GLOBAL DIRECTIVES ####
###########################
# Filter duplicated messages
$RepeatedMsgReduction on
#
# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog
#
# Where to place spool and state files
#
$WorkDirectory /var/spool/rsyslog
#
# Include all config files in /etc/rsyslog.d/
#
$IncludeConfig /etc/rsyslog.d/*.conf
auth,authpriv.* @192.168.0.118:514
*.* @@192.168.0.118:514
#auth,authpriv.* @192.168.0.95:514
#*.* @@192.168.0.96:514
#auth,authpriv.* @192.168.0.204:514
#*.* @@192.168.0.204:514
8. 이메일서버 세팅하기
sudo apt -y install postfix
cd /etc/postfix
sudo nano main.cf
# line 82 : uncomment
mail_owner = postfix
# line 98 : uncomment and specify hostname
myhostname = ip026.lsw.kr
# line 106 : uncomment and specify domainname
mydomain = lsw.kr
# line 127 : uncomment
myorigin = $mydomain
# line 141 : uncomment
inet_interfaces = all
# line 189 : uncomment
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
# line 232 : uncomment
local_recipient_maps = unix:passwd.byname $alias_maps
# line 277 : uncomment
mynetworks_style = subnet
# line 294 : add your local network
mynetworks = 127.0.0.0/8, 192.168.0.0/24
# line 416 : uncomment
alias_maps = hash:/etc/aliases
# line 427 : uncomment
alias_database = hash:/etc/aliases
# line 449 : uncomment
home_mailbox = Maildir/
# line 585: comment out and add
#smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_banner = $myhostname ESMTP
# line 659 : add
sendmail_path = /usr/sbin/postfix
# line 664 : add
newaliases_path = /usr/bin/newaliases
# line 669 : add
mailq_path = /usr/bin/mailq
# line 675 : add
setgid_group = postdrop
# line 679 : comment out
#html_directory =
# line 683 : comment out
#manpage_directory =
# line 688 : comment out
#sample_directory =
# line 692 : comment out
#readme_directory =
# line 693 : if also listen IPv6, change to [all]
inet_protocols = ipv4
# add follows to last line
# disable SMTP VRFY command
disable_vrfy_command = yes
# require HELO command to sender hosts
smtpd_helo_required = yes
# limit an email size
# example below means 10M bytes limit
message_size_limit = 10240000
# SMTP-Auth settings
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination


---

참고사이트
1. 우분투 다운받기