setup network

elaboration phase 1 Faze 1 must work anywhere. Use your laptop in DHCP with virtualbox ... masquerader (1) An iptables firewall in CentOS7 Put a network card in bridged on DHCP. Put a second network card in INTnet. Use iptables to apply NAT masquerading from the outside to the intnet. (DHCP to NAT does not work with DNAT) Later we will talk about the iptables rules. For the time being you keep it open. On this machine you also set up a DHCP server that all clients have to use AD server Create a domain controller on your .local Put in 4 users Kristof is allowed to add 63 more requirements ... Exchange server Set up an email server with your local domain. Kristof is allowed to add 127 more requirements ... clients Set up a win7, a win10 and a linuxMint18 as an AD and Exchange client Kristof is allowed to add 255 more requirements ... DNS slave Set up an ubuntu server as a DNS slave (from AD). masquerader (2) Set up a squid proxy for the clients. Make sure the clients can not go directly to the web. The DEBS and DNS slave servers must also access the web via the proxy, and may not use ports 80 or 443 directly. Only the AD server can go directly with port 53. The linux servers use the DNS slave All other machines use the DNS of the AD server Finish the masquerading server so that only the DHCP, SSH and SQUID on this server are accessible from the inside. The masquerading server is accessible via port 10022 on the outside and port 22 on the inside. The masquerader does PORT-address translation from port 20022 to the SSH of DNS slave and 20122 to the SSH of DEBS The masquerader does Port-address translation to the Rdesktop of AD and Exchange server on ports 20389 and 20489, respectively. DEBS Set up a debian server with two websites (local owncloud for users and ganglia) make sure the windows servers also participate in ganglia .. samba service that is in the AD network create individual shares for each user create two shares for shared use: 1 share with read and write permissions for everyone 1 share with subdirectories in which each user has write permissions in his own dir, and the others only read. BACKUPS run a scheduled backup of ... on the AD server or EXCHANGE server to DEBS run a cronned backup from DEBS to the AD server