Common Port Numbers & Protocol Suite

Common Port Numbers

· HTTP is Hyper Text Transport Protocol and is transmitted over the wire via PORT 80(TCP).

· HTTPS uses port 443 instead of HTTP port 80 in its interactions with the lower layer, TCP/IP.

· SMTP for sending e-mail on port 25

· POP and IMAP for retrieving e-mail

Service	Port Number	Protocol
AFP (Apple file service )	548	TCP
Apple Remote Desktop (Remote Management)	3283, 5900	TCP, UDP
HTTP (Web service)	80 or 8080	TCP
HTTPS (secure Web service via SSL)	443	TCP
iCal Server	8008	TCP
iCal Server using SSL (Secure Sockets Layer)	8443	TCP
iChat Server	5222	TCP
iChat Server’s file transfer proxy	7777	TCP
iChat Server, server-to-server connection	5269	TCP
iChat Server using SSL	5223	TCP
Mail: IMAP	143	TCP
Mail: IMAP using SSL	993	TCP
Mail: POP3	110	TCP, UDP
Mail: POP3 using SSL	995	TCP, UDP
Mail: SMTP legacy SSL submission	465	TCP
Mail: SMTP standard	25	TCP, UDP
Mail: SMTP submission	587	TCP
SMB/CIFS (Windows file service)	161	TCP
SSH (Secure Shell) remote connection	22	TCP, UDP

Ports
Port	Use
21	FTP – usually in DMZ
22	SSH
23	Telnet
25	SMTP
49	TACACS
53	DNS
67 & 68	DHCP
80 or 8080	HTTP
110	POP3
143	IMAP4
161	SNMP
389 & 636	LDAP
443	HTTPS / SSL
UDP 1701	L2TP
TCP 1723	PPTP

The Internet Protocol Suite

Application Layer

BGP · DHCP · DNS · FTP · GTP · HTTP · IMAP · IRC · LDAP · Megaco · MGCP · NNTP · NTP · POP · RIP · RPC · RTP · RTSP · SDP · SIP · SMTP · SNMP · SOAP · SSH · Telnet · TLS/SSL · XMPP ·

Transport Layer

TCP · UDP · DCCP · SCTP · RSVP · ECN ·

Internet Layer

IP (IPv4, IPv6) · ICMP · ICMPv6 · IGMP · IPsec ·

Link Layer

ARP/InARP · NDP · OSPF · Tunnels (L2TP) · PPP · Media Access Control (Ethernet, DSL, ISDN, FDDI

Trixbox

Username:maint
Password: P@ssw0rd

Static IP: 192.168.40.4

Configuration Settings:
IAX2
Port Forwarding on port 4569

Team Extensions:
Team1: 1000
Team2:2000
Team3:3000
Team4:4000

Brandi:4001
Roger:4002
Rabah:4003
Jacob:4004
LAMP:4005
Mail:4006

Trunks

(IAX2)Team1

• Outbound caller id: 4000

Outgoing settings:

• host=192.168.1.15
• user=4000
• seceret=4000
• type=peer

(IAX2)Team2

• Outbound caller id: 4000

Outgoing settings:

• host=192.168.1.16
• user=4000
• seceret=4000
• type=peer

(IAX2)Team3

• Outbound caller id: 4000

Outgoing settings:

• host=192.168.1.17
• user=4000
• seceret=4000
• type=peer

Outbound Routes

Team1
Dial patterns: 1|.
Trunk sequence: IAX2/Team1

Team2
Dial patterns: 2|.
Trunk sequence: IAX2/Team2

Team3
Dial patterns: 3|.
Trunk sequence: IAX2/Team3

Spring 2010 Advanced Linux Class Project: Stage 1-3

Stage 1

1. You will be assigned into teams.
2. Your teams will be issued 3 hard drives.
3. Your teams will also be given a row of computers to work with in the classroom.
4. You will use your virtual box Ubuntu OS's as your client PC's or you can boot straight into Ubuntu on your class drives.
5. Your team will install a router version of Linux on one of the hard drives to segment your client PC's. You will need 2 NIC's in this box. (One LAN, One WAN) You will set all IP's statically (NO DHCP). Don't forget to configure your firewall.
6. Your team will need to install Ubuntu server on 1 drive and set it up as a LAMP server. This server will host files off of this server securely. Using whatever protocol you choose. You will also install a web based administering program on this server. (Check out Webmin).
7. On the third drive your team will setup email services. (Example: Ubuntu's Mail server) for your portion of the network.

You will need to work together with your teammates and do quite a bit of research using the internet to get this accomplished! Good Luck!

Stage 2

1. Your email server should be able to send internally right now. Later you will need to set it up to send externally. You don't have to worry about encrypting emails right now. This will come later.
2. I would like you to setup DHCP for your client PC's. Use the Network ID I have already assigned you. Make sure you have plenty of IP addresses in your scope for future upgrades. Do not hand IP addresses out to my network. Your team will get 1 strike on this and then I will start deducting points.
3. Setup DNS on your local network, you may have to statically set your Servers and Client PC's within the record.
4. I want you to be able to transfer encrypted files internally and externally on your network. In stage 3 I will give each team a file to transfer and I will monitor the transfer of these files. If they are not encrypted, your team will lose points.

Stage 3

1. I will issuue your team a 4th hard drive to install and setup as a Trixbox VOIP server. This will be installed on the last open computer on your network.
2. Then I would like you to take 2 of your client hard drives and use and use virtual box to setup Ubuntu as client PC's on your team's network. Make sure thse Ubuntu OS's are able to access your network services.
3. Then I would like you to use the Windows XP host OS's to add 2 more clients to your network. This should bring your client count to 6 computers. 4 Ubuntu PC's and 2 Windows XP PC's. Your Server count should be 4. The first should be a router, the second should be your LAMP, the third should be your Mail, and the fourth should be the Trixbox VOIP server.
4. Once all clients are on the network I would like you to install soft phones on all of your client OS's (Ubuntu and Windows XP).
5. Make sure your team has a Web Page that can be accessed from outside your network that is hosted on your LAMPserver. I will need to validate this. I will also need to input your server's name and WAN IP address into my DNS Server's record to assist you with sharing your web page by name. This will also help you with step 6.
6. Setup your email server so your team can send emails to other teams that are located outside of your network. You may need to include other team's WAN info into your DNS record. You will have to setup port forwarding to assist you with any service transfer.
7. Once all of the above steps are validated by your supervisor (ME) I will then give your team a file to host off of your LAMP server. This file will be transferred to your client PC's and to the other Teams Client PC's on their own Network using the protocol's you have chosen. I will monitor the transfer of these files. If they are not encrypted, your team will lose points.

Client Machines-Ubuntu Desktop 9.10

May 14, 2010

• Set up email and verified sending/receiving by sending test emails between each other.
• Set up printer
• Ran Umit scan and printed topology map

May 17, 2010

• Installed Open SSH (through Synaptic)
• Installed WinSCP (Client side file transfer)

Host name: team4.lamp

User name: team4

Password: P@ssw0rd

NOTE: Be sure to check either SCP or SFTP

Mail Server-Ubuntu 9.10 Desktop Edition-Drive#3

Edit Network Connections Menu:
(team4.local)

IPV4 Settings:

• ETH1

1. Address: 192.168.40.3
2. Network Mask:255.255.255.0
3. Gateway: 192.168.40.1
4. DNS Servers: 192.168.40.1
5. SERVER: mail.team4.com

Local login-
Username: Team4
Password: P@ssw0rd

Webmin login-
Username: root
Password: P@ssw0rd

POSTFIX

General Options

• What domain to use in outbound mail: team4.local
• What domains to receive mail for: team4.local
• Internet hostname of this mail system:team4.local
• Automatic local networks:same IP subnet

SMTP Authentication and Encryption

• SMTP relaying restrictions: Allow connections from the same network, reject email to other domains

Dovecot

Networking and Protocols

• Serve mail protocols: IMAP, POP3, IMAP (SSL), POP3 (SSL)
  

• Installed Webmin
• Added user accounts
• Tested client emails by sending/receiving from client to client

Lamp (Web) Server-Drive #2: Ubuntu 8.04 Server Edition

Username: Team4
Password: P@ssw0rd

Used "Lamp" settings within setup menu

Network Connections Menu:

• Wired Connection 1
• Method: Manual
  
• Address: 192.168.40.2 Netmask: 255.255.255.0 Gateway:192.168.40.1 DNS Servers: 192.168.40.1

May 14, 2010

• Re-installed Ubuntu server 8.04
• Enabled GUI using sudo apt-get install ubuntu-desktop command

May 17, 2010

• Installed Open SSH (through Synaptic)
• Installed WinSCP (Client side file transfer)

Host name: team4.lamp

User name: team4

Password: P@ssw0rd

NOTE: Be sure to check either SCP or SFTP

Drive #1: Untangle Box-Drive 1

Username: admin
Password: P@ssw0rd

HOSTNAME: untangle.team4.local

External Interface:

• External IP address: 192.168.1.18
• Netmask: 24
• Default Gateway: 192.168.1.1
• Primary DNS Server: 192.168.1.1
• Secondary DNS Server: 192.168.1.107
  

Internal (Previous) Configuration:

• Configuration Type: Static
• Address: 192.168.40.1
• Netmask: 24

Client Configuration:

1. Go to Network Properties
2. Change the 3comm NIC from dynamic to static
3. Add the entries as follows:

• IP address: 192.168.40."computer #"
• Subnet: 255.255.255.0
• Gateway: 192.168.40.1

DHCP ENABLED (DYNAMIC)

• Scope: 192.168.40.5- 192.168.40.50

DNS Settings:

External

• team3.local 192.168.1.17
  
• team2.local 192.168.1.16
• team1.local 192.168.1.15

Internal

• Trixbox 192.168.40.4
  
• lamp 192.168.40.2
• mail 192.168.40.3

Port Forwarding

Description: Trixbox IAX2

Forward the following traffic:

• Protocol: TCP & UDP
• Port Number: 4569

Description: Mail server

Forward the following traffic:

• Protocol: TCP&UDP
• Port Number: SMTP (25)

Description: Web Page

Forward the following traffic

• Protocol: TCP
• Port: HTTP (80)

Description: File Server

Forward the following traffic

• Protocol: TCP & UDP
• Port: SFTP (22)