VPNs using Linux

by Ralf Spenneberg

Date and duration:

3 Days, 25th, 26th and 27th January 2006

Abstract:

This tutorial will cover the basics of the implementation of a virtual private network using Linux.

The need for virtual private networks becomes greater, the more business is done using the internet. Many vendors address this need and not many people know about alternative open source solutions.

In this talk the author will start with a brief overview of the IPSEC and IKE protocols.

Then he will demonstrate how the IPsec protocols operate and how they are configured using the setkey-command before he will briefly cover the differences of the two mainly used IKE implementations:
Pluto (openswan) and Racoon (ipsec-tools)

The usage of these IKE-daemons to setup a simple tunnel using preshared-keys will be shown. After the configuration has been explained the tunnel will be started and tested. Tools for troubleshooting will be demonstrated.

Since VPN solutions are often used to allow travelling salesmen to connect securely to the intranet, a roadwarrior scenario will be explained and implemented. This scenario will allow numerous Clients to connect to the intranet. The clients will be authenticated using X.509 certificates. The implementation of a PKI and its role in the VPN will be discussed.

Once the basics are laid, we will cover advanced topics like
dead-peer-detection
nat-traversal
Xauth
IKE-Mode-Config

The tutorial will end on the last day covering firewalling aspects of the current IPsec implementation in the Linux kernel and how to solve their problems.

The intended audience of this short course are Linux/UNIX Administrators wishing to implement an interoperable VPN solution using Linux. Experiences using other virtual private networking software like the PPTP are helpful but not mandatory. Knowledge of Linux, iptables and the TCP/IP protocol is required.

Prerequisites

Participants should know how to use the Linux command line interface and a text editor, and have a good understanding of the TCP/IP protocol.

About the speaker

Ralf Spenneberg has used Linux since 1992 and worked as a system administrator since 1994. During this time he worked on numerous Windows, Linux and UNIX systems. Starting 1998 he has been working as a freelancer in the Linux/UNIX field.
Most of the time he provides Linux/UNIX training. His specialty is network administration and security (firewalling, VPNs, intrusion detection, forensics).
He has developed several training classes used by Red Hat and and other IT training companies in Germany.
He has spoken on several SANS conferences and even more UNIX/Linux specific conferences. He was chosen to be member of the program comitee of the Linux Kongress and the GUUG Frühjahrsfachgespräch.
Last year he published several articles in well-known magazines and already 3 german books covering Intrusion Detection and VPNs. His last book covering Firewalling is in print right now.

Voice over IP

by Dr. Rainer Oechsle, Patrick Harpes, Johannes Hermen

Date and duration:

2 Days, 25th and 26th January 2006

The theoretical part of the VoIP tutorial first compares classical circuit-switched telephony with packet-switched VoIP telephony. Then the most important features and protocols of VoIP are discussed in more detail. The outline of the tutorial thus is as follows:

• Classical Circuit-Switched Telephony PSTN (POTS, ISDN)
• Basic Techniques of Packet-Switched Telephony (Addressing, Signalling [SIP, H.323, IAX2], Data Transport [RTP / RTCP], Audio Codecs)
• Advanced Techniques (Quality of Service, Security, ICE)
• Gateways between PSTN and VoIP Networks
  
• Business Aspects of VoIP.

On the second day of the tutorial, the free PBX Asterisk will be discussed.
The attendees will learn the advantages and features of Asterisk. Hands-on exercises will deepen into the subject, and during the tutorial, each attendee should setup his own PBX on Asterisk.

Handouts
Asterisk-Tutorial
by Patrick Harpes and Johannes Hermen

Prerequisites

Participants should know how to use the Linux command line interface and a text editor, and have a basic understanding of the TCP/IP protocol.

About the Speakers:

Dr. Rainer Oechsle

Patrick Harpes works since 1993 in the Centre de Recherche Public Henri Tudor. Besides his job as research engineer, he is the founder of LinuxDays Luxembourg. Patrick gave several free software related talks on different national and international Linux conferences. As system administrator of the HealthNet Luxembourg project he introduced Linux as main platform to run this network. In other research projects like the Wallace Project or LuHF Project, Linux was his first choice to build up reliable, secure  and scalable systems.

After Johannes got his diploma in applied computer sciences at the Fachhochschule Trier in july 2005, he started working for Santec at the Centre de Recherche Public Henri Tudor. At the moment he is working on different Java projects in the Healthcare sector. His "First Contact" with Linux was in 99, and after that he started using and experiencing Linux for all his needs. Besides he wrote some packages for the fli4l project and managed the Linux server of the Students of Computer Science for several years during his studies.

Hacking for Admins

by Michael Hamm

Date and Duration:

1 Day; 25th January 2006

Abstract:

Security mechanisms only could be planned and developed successfully, if the security responable administrators mastered the attackers methods and tools, and understand their way of thinking. This tutorial will convey the manner in which attackers proceed. Participants will have access to PCs with tools and exploits. The practice oriented tutorial will be completed by technical backround information.

Topics covered:

• Host hopping
• Advanced scanning techniques
• Buffer overflows
• Port Knocking
• Rootkits
• Spoofing & Sniffing in a switched environment
• Session Hijacking in a switched environment
• Attacks against SSH and SSL

Prerequisits

Participants should know how to use the Linux command line interface and  the vi editor, and have good knowledge of the TCP/IP protocol.

About the speaker

Michael Hamm works since many years in the area of networking and security. He talk at linuxdays.lu, hack.lu Clussil and SITec and wrote multiple textes for a professional german IT-Magazine.

Basic Linux Course for Beginners

by Lilux

Date and Duration:

1 Day; 25th January 2006

Abstract

Date and Duration:

1 Day; 26th January 2006

Abstract

This tutorial consists in configuring a mail server based on Postfix. In the first, more theoretical part, the architecture and the different configuration files of the Postfix system will be explained. During the practical part, the attendees will setup a mail server that handles different domains. Then, the server will be extended  in a way to be able to scan for viruses.
In the second part of the tutorial, Christian Mock will go into details how to protect your mail server and mails from spam.

Prerequisites

Participants should know how to use the Linux command line interface and a text editor, and have good knowledge of the TCP/IP protocol.

About the speakers:

Christian Mock, Vienna, Austria; Co-Founder of VIBE!AT (https://www.vibe.at), member of q/uintessenz (http://quintessenz.org), involved in the Austrian "Linuxwochen", Big Brother Awards, and generally one of the Usual Suspects. Linux User since about 1992. Co-founded an ISP long ago, now CTO at a small IT Security company.

Eric Dondelinger, Luxembourg, is a research engineer at the CRP Henri Tudor
and member of LiLux (http://www.lilux.lu/).
He mainly works in systems and network administration, mostly using Free Software.
He actively participated in several events around Free Software.

Forensic Tutorial

by Christophe Monniez and Patrick Vanderlinden

Date and Duration:

1 Day; 26th January 2006

Abstract

This tutorial will consists in anylizing traces on a usbkey with the help of the FCCU Gnu/Linux forensic boot CD.
Participants will learn how to make a keyword search, to undelete files and to use some more advanced forensic techniques. The participants are invited to try the examples during the tutorial. The how and the why will be explained.
This turotial is mainly based on the workshop that was given at hack.lu which is available, with the usbkey image on http://www.lnx4n6.be. So start to train and prepare your questions :-)

Prerequisites

Participants should know how to use the Linux command line interface.

About the speakers

Patrick Vanderlinden and Christophe Monniez are both forensic investigators at the Belgian Federal Computer Crime Unit. Christophe is the main maintainer of the FCCU Gnu/Linux Forensic Boot CD
(http://www.lnx4n6.be and http://www.d-fence.be)

Linux Networking Course

by LiLux

Date and Duration:

1 Day; 26th January 2006

Abstract

In this tutorial, we will start with how to configure a simple ethernet interface and go on to routing, virtual interfaces, VLANs, and on to packet filter, quality of service, and encrypted VPNs between hosts or networks. The use of classic networking tools to analyze a network will be included.

Prerequisites

Participants should know how to use a command line interface and a text editor, and preferrably they ought to have a basic understanding of TCP/IP (what an IP address or a port number are).

Printing and Samba Tutorial

by Till Kamppeter and Alain Knaff

Date and Duration:

1 Day; 27th January 2006

Abstract

It will be shown how to set up printing in a networked environment with Linux/Unix server(s) running the CUPS printing system. Planned topics:

• Setting up a Print Queue with CUPS
• Setting up Ethernet-Connected Printers
• Networked Printing with CUPS
• Accessing Printers from Windows Clients via Samba

During the Samba part of the tutorial, you will first learn how to configure a simple Samba file server. From there, we will move on to more advanced tasks, such as setting up a primary domain controller whose passwords may be synchronized using PAM with the UNIX credentials. Finally, you will learn how to set up fine-grained access control and printing.

Prerequisites

Participants should know how to use the Linux command line interface and a text editor, and have a basic understanding of the TCP/IP protocol.

About the speakers

Till holds a PhD in Theoretical Physics. While he made his PhD he was system administrator for Unix and GNU/Linux in the physics department. As system administrator he got to the free software with contributions to X-CD-Roast. Later XPP was his first own project. XPP lead him to Mandriva in Paris in August 2000, where he now is responsible for the printing and digital imaging in Mandriva Linux.

His main project now is maintaining the www.linuxprinting.org web site with its printer database and the Foomatic software. He improved this system substantially. Currently Foomatic is the standard for printer driver intergration in most major GNU/Linux distribution. He is also in the Open Printing Group of FreeStandards.org. In the past he has given several talks and presentations on free-software-related events and written several articles in free software magazines.

Alain became involved with Linux in 1993, and is the author/maintainer of several Linux tools, including mtools, fdutils, zlibc and udpcast. He joined the LLL project, which makes intensive use of samba in 1997. He is a founding member of LiLux, and currently its vice-president. You can contact him via e-mail as ld2006@knaff.lu or through his home page at http://www.alain.knaff.lu

Data storage and processing

by Georges Schütz and Marc Seil

Date and Duration:

1 Day; 27th January 2006

Abstract

You face data all the time in private and professional life. This heap of data needs a structured and convenient way to be stored and analyzed. The tutorial intends to show the practical use of Free & Open Source Software (FOSS) in getting, archiving and analyzing this data. It's divided in two sequential parts. The first part covers the aspect of data archiving, organizing and storing. Some theory and praxis will be covered in this part. It is mainly based on the MySQL DB-System and FOSS client applications. The second part treats the data analysis and visualization. The usage of the statistical and mathematical tool "R" will be discussed and experienced  in this part.

Prerequisites

Participants should know how to use the Linux command line interface and a text editor. Furthermore some knowledge in maths and statistics can help.

About the speakers

Georges Schutz works since 2004 at the Centre de Recherche Public Henri Tudor, where he was before as a PhD Student in computer science. He is using the GNU-Tools and the Linux system since 1991. The main field of interested apart from free and open-source software is the domain of data analysis, especially focusing time series, based on advanced methods like neural networks, and other data mining approaches.

OpenOffice.org

by Hugues Henriot

Date and Duration:

1 Day; 27th January 2006

Abstract

This will be an interactive tutorial where the participants will be faced to the OpenOffice suite.

The tutorial will focus on the different key applications. The word-processing, the spreadsheet, the presentation manager, the drawing program, the chart and formula editor are presented and their interoperability is shown.

Examples using all these applications are worked out together with the participant.

Prerequisites

Participants should know that a mouse could be something else than an small animal.

About the speaker

"Intellectual Property" and Licenses

by Matthieu Farcot

Date and Duration:

1 Day; 27th January 2006

Abstract

Intellectual property is the heart of any software or intellectual creation. From copyright to copyleft, this track will try to bring you answers on various topics linked to IP, such as licensing and it's impact on business models in software, or the usefulness of open diffusion in any kind of creation. The track will be divided in two parts, one dealing specifically with IP in open-source projects (license explanation, inter-compatibility problems, etc) and the other one focusing on the Creative Commons framework.

Prerequisites

/

About the speakers