Open main menu

CDOT Wiki β

Changes

OPS535 A2 201603

55 bytes added, 17:18, 15 March 2020
m
no edit summary
= Due Dates =
* This assignment worth 15% of your final grade.
* See blackboard for the due date.<!--* Important: You must be in the Lab on the due date to present your systems in order to have your assignment marked unless it is for medical reason.-->
=Specification=
** Users in your domain must be able to send emails to users in the same domain and users in other students' domains in the class.
** Users in your domain must be able to receive emails from other email users (both in your domain and from other domains).
<!--* An IMAP Access Agent (running dovecot) allowing users in your domain to remotely access their mail.** Users in your domain must be able to access/manage their mail box using IMAP(s) clients.-->
* You email server must be configured to check the SPF (sender policy framework) of other domains for incoming email and reject emails that are violating the sender policy.
* Configure your DNS server to implement and provide the SPF protection for your assignment domain.
* Configure your DNS server to implement and provide the DNSSEC records for your assignment domain.
**Provide the administrator for your lab domain (that's you) with a copy of the DS key for your assignment domain. If you have not already done so, include the glue record as well.
**Provide the administrator for the ops domain (your professor) with a copy of the DS key for your lab domain. If you have not already done so, include the glue record as well. This, combined with the step above will establish a chain of trust between your lab assignment network, your assignment lab network and the rest of the ops domain.
**Configure a DNSSEC Trust Anchor so that your co-nfs server considers the .ops server to already be authenticated. I will provide the key necessary for this through blackboard.
* Pri-dns must be the primary DNS name server for your assignment domain with the proper MX record(s), SPF record(s), A record(s), and PTR record(s). It must be queriable by any machine.
**Provide the administrator of the .ops domain (your professor) with glue records for your domain.
* Co-nfs must be a caching DNS server, accessible to machines in your networks, that will forward traffic to the server for the ops domain (172.16.191.1), then to your rns-ldap.
* Rns-ldap must be a forwarding server only.
**It must only be queriable by your co-nfs.
= Evaluation =
==Script==
<!--
On the due date you will be tasked to:
# Add two new email users to your domain. Name of the new users will be given in class.
# receive the reply email from the designated user of the other domain.
# query a record from another domain
# query a record from another domain with dnssec information included.-->
I will post a script to blackboard that will capture your configuration and logs. You will run this script on your machines and upload the output to blackboard.
If you have any questions or need any clarification, please email your instructor at least one week before the posted due date.
932
edits