Program Overview

Program Overview

The program "ALTNET. Internet Services in OS Alt" is a module of the professional retraining program "System and Network Administration of OS Alt" and "Information Protection in Computer Systems and Networks."

Program Details

• Duration: 40 academic hours
• Schedule: 5 sessions of 8 academic hours or 10 sessions of 4 academic hours
• Level of Complexity: Not specified
• Tuition Fee:
  • For individuals: 40,000
  • For legal entities: 40,000 (with possible discounts depending on the number of students, contract sum, and other conditions)
  • Distance learning: 24,000 (no discounts provided)

Knowledge and Skills Acquired

Upon completion of the program, students should be able to:

• Install and configure web servers in Apache2 and Nginx OS Alt
• Configure packet filtering and address translation
• Install and configure the Squid proxy server
• Deploy the Postfix MTA
• Organize access to mailboxes via the IMAP protocol using Dovecot
• Configure mechanisms for confirming the authenticity of mail servers using SPF/DKIM/DMARC
• Configure mechanisms for filtering unwanted mail messages
• Deploy the SOGo group work organization system
• Configure time synchronization services
• Provide access to a node via the FTP protocol
• Configure video conferencing services using Jitsi Meet
• Configure remote access to applications

Students should also know:

• The architecture and principles of deploying web applications
• The principles of mail transmission over the Internet and the architecture of mail systems
• The principles of confirming the authenticity of mail servers and mechanisms for protecting against unwanted mail messages
• The architecture and principles of configuring video conferencing services
• Possible mechanisms for remote access to applications

Practical Experience

Students should acquire practical experience in:

• Deploying web applications
• Deploying mail systems
• Ensuring remote access to applications

Instructors

• Matrosov Alexey Alexandrovich
• Orlov Egor Sergeevich
• Sulatskov Ivan Yurievich

Related Courses

• System Administration
• Network Technologies
• Information Security
• BaseAlt

Professional Retraining Programs

• System and Network Administration of OS Alt
• Information Protection in Computer Systems and Networks

Course Schedule

The schedule for the course is provided in the original text, detailing specific dates and times for each session, along with the instructor and platform (online).

Course Content

The course is divided into several modules:

1. Web Services in OS Alt
   • Ensuring access to resources via HTTP/HTTPS protocols
   • Apache HTTP Server
   • Nginx web server
   • CGI/FastCGI for dynamic web applications
   • Reverse Proxy mode for accessing web application servers
   • Ensuring the operation of main web application stacks in OS Alt
   • Configuring HTTPS access to web sites in Apache and Nginx
   • Using certbot to obtain Let's Encrypt certificates
2. Packet Filtering in OS Alt
   • Netfilter architecture
   • Configuring packet filtering using iptables
     ftables
   • Using the alterator-net-iptables module
3. Building Firewalls in OS Alt
   • Configuring traffic forwarding
   • Filtering passing traffic on the gateway
   • Address and port translation
4. Squid Proxy Server
   • Installation and basic configuration
   • Using access lists
   • User authentication
   • Squid's content filtering capabilities
   • Deployment in Reverse Proxy mode
   • Using alterator-squid and alternator-squidmil modules
5. Configuring the Mail Server (Postfix/Dovecot)
   • Principles of mail transmission over the Internet
   • Configuring DNS for the mail server
   • Installing and basic configuring Postfix as a local MTA
   • Configuring Postfix as a mail server
   • Providing access to user mailboxes using Dovecot
   • Configuring SMTP over SSL/TLS support
   • SASL authentication for receiving and sending mail messages
6. Filtering Unwanted Mail Messages
   • Mail filtering parameters in Postfix
   • Local and centralized blacklists
   • Configuring SPF for Postfix
   • Configuring DKIM for Postfix
   • Configuring DMARC for Postfix
   • ClamAV: checking mail attachments for viruses
   • SpamAssassin: identifying spam in mail messages
   • Amavisd-new mail filtering service
7. SOGo Group Work System
   • Preparing the environment and installing SOGo
   • Configuring the web interface
   • Configuring authentication in Active Directory
8. Time Synchronization Services
   • NTP protocol and its implementations in OS Alt
   • Configuring the NTP server chronyd
9. FTP Service
   • Xinetd super daemon
   • Organizing anonymous access based on vsftpd
10. Video Conferencing Services (Jitsi Meet)
    • JitsiMeet architecture
    • Deployment and configuration of components
11. Remote Access to Applications
    • Means of remote access to console and graphical applications in OS Alt
    • RDP access: deploying the RDP server
    • VNC access to a user session: Vino-mate and x11vnc
    • VNC server with support for user sessions: tiger-vnc
    • Deploying and configuring X2GO

Higher Engineering School

The program is offered by the Higher Engineering School of Saint Petersburg Polytechnic University.