FTP

One of the biggest challenges for designing and implementing the KSA computer network was to choose a secure and reliable way to share and manage KSA’s documents. One option was to use a web server for upload and download documents and the other one was to use a proper FTP server [5] [6]. There are pros and cons of using either option. For example, web server is easy to implement but it is not as fast as FTP. Using the webserver for sharing document does not let us know how much data each user is writing where as with FTP users could be limited by the number of Mega Bytes or Giga Bytes of a shared hard drive on a server

installing VSFTPD

apt-get install vsftpd
*edit /etc/vsftpd.cof as below :

14th - 18th July 2014 report

During this week, I was doing network connectivity and testing all the services in my task list. I made sure Nagios was working. I could observe my server's health check including memory availability, number of current logged in users and available disk space. XMPP server was also working. To test the XMPP, I downloaded Aduim (an XMPP client) and created severals account on the XMPP server and tried to chat. It was all working.
I also tested the FTP server. I could successfully log in to the FTP server using the below command:
ftp ksa.com
After I put the username and password I could upload/download files using put/get commands accordingly.

DNS was smoothly working. Using "Dig" and "nslookup" commands in linux, I could resolve different record set for the www('A' record) , mail (eXchange record) , ftp('A' record) ,ns1(name server) to their IP addresses.

DNS

DNS
DNS(Domain Name system ) is a distributed for computers , connected to the internet . It translates easily domain names to an ip address .The domain name is an essential component of the function of the internal. The DNS servers as phone or technological dictionary for the internet by translated the hostname to an ip address for example the domain name www.google.co.nz translates to the the ip address 95.182.213.111. The DNS could be quickly updated. DNS distributes the responsibility of assigning domain names and sets those names to ip address by giving authoritative name servers for each domain. The DNS s

pecifies the technical functionality of the database service. The DNS uses the inter

DNS installing by the command :-

1- change hostname

- sysctl kernel.hostname =ksa.com

- edit  /etc/host   (add isa.com)

-  edit   /etc/hostname   (ns1)

2- install bind9

apt-get install bind9

3- edit   /etc/bind/named.conf.local

we create a zone for ksa.com

4-   /etc/bind/zones

we create ksa.com.db

add  A(www,NZ,US) , MX(mail exchange) , NS (this DNS server)

5-  reverse DNS lookup

6- service bind9 restart

7- Test / evaluation

- nslook up

- server 172.0.0.1 (DNS server local machine)

    – ksa.com 

DESIGNING AND SECURING A COMPUTER NETWORK FOR THE KSA(OIL COMPANY)

In our project we have 3 branches one in Saudi Arabia and one the US, one in NZ. The KSA is the main branch in our project. We call it "OIL COMPANY" as we mentioned in the heading. In this company there are 300 workers, 15 managers and 6 network administrators as well as an auditor .In this company there are a few background there is problems. One is that the KSA branch there is no network they only use fax and telephone to communicate. This is very old technology and also very slow and not cheap it is so expensive to communicate between all branches. The second problem is that they do not have a database to analyze the data. Also the KSA branch data management especially across branches. We have a solution for problems. We will provide internal and external networks for the KSA branch. We are going to use secure VPN for branches to ensure safe communication of data. We will use security tools such as DHCP in the KSA branch. In other branches there will DHCP client in the US as well as NZ. In addition there will be real time monitoring of the network activities to identify threats, and attacks. We are going to implement a database for storing and analyzing the data. I am going to use security tools such as DNS server, FTP server, XMPP (chat server) , network monitoring as Nagio’s . I am going to set up a firewalls, switch security, configuration DMZ, IPS and for Extension part Raspberry pi as a network monitoring node, private VLAN. MY friend Ibrahim is going to set up DHCP server, web hosting, and remote access to the equipment, VPN. He is going to investigate the use of honeypot server and finally pen testing of the final solution.