DNS and RPZ Training

Duration: 1 day. The course assumes knowledge of the basic principles of DNS or who have taken, at least, the 2 day Basic DNS course.

La formation est aussi disponible en français.

The primary focus of the course is BIND which is available on Linux, UNIX and Windows platforms. The course is offered with Linux (Fedora Core), FreeBSD or Windows 7,8 and 10 as the platform for all exercises.

Summary

Response Policy Zone is an important new technology available from BIND 9.10+. Using standard zone files it is possible to block or handle in a variety of ways access to defined web sites. While many look at RPZ as a simple way to limit access to undesirable or unwanted web sites, the powerful set of Response Triggers and Response Actions means that the technology has a significant role to play in prevention of malware distribution and other site security functions.

Description

This is an intensive course. Students will cover the Policy Actions and Policy Triggers provided by RPZ. Master and Slave configurations are covered to allow RPZ files to be securely replicated both within and outside an organization. Zone naming and discovery is discussed to enable RPZ to operate in Stealth mode. The course includes a hands-on RPZ file exercise.

Audience:

The course is designed for experienced DNS administrators, Network and System Administrators and Security oriented administrators.

About the Instructor

Ron Aitchison is the author of Pro DNS and BIND (Apress ISBN: 1-59059-494-0) and Pro DNS and BIND10 (Apress ISBN-13: 978-1590594940). Ron has been involved in communications and networking for more years than he cares to admit and is president and founder of Zytrax, Inc. a company specializing in IP communications (wired and wireless), systems development and consulting in Montreal, Canada. He has been involved with Open Source for over 15 years and is the primary author of the Tech Stuff, DNS for Rocket Scientists and LDAP for Rocket Scientists available as free resources for the community.

Outline

Module 1: Response Policy Zone Overview

Standard DNS and RPZ Course Starts with this Module

• RPZ Technology in BIND
• Usage Scenarios
• RPZ and DNS query responses
• Early and Late query interception

Module 2: RPZ Configuration

• RPZ skeleton files
• RPZ Policy Triggers
• RPZ Actions
• RPZ Zone File construction
• BIND configuration for RPZ
• RPZ and BIND views
• Exercise: RPZ Firewall

Module 3: RPZ and Security

• Stealth Configuration: Zone Naming Strategies
• Implications for DDoS attacks
• Distributing RPZ files
• Securing Zone Transfer and Notify
• Summary and Review
• Resources

Other courses: Basic DNS, Advanced DNS, DNS Security, LDAP Courses, X.509 (SSL) Certificate Training.