Mac OS X Server ネットワークサービスの管理

Transcription

1 Mac OS X Server 10.4

2 apple Apple Computer, Inc Apple Computer, Inc. All rights reserved. Mac OS X Server Apple 1 Infinite Loop Cupertino CA U.S.A Apple Apple Computer, Inc. Apple Apple AppleScript AppleShare AppleTalk Mac Mac OS Macintosh Power Mac Power Macintosh QuickTime Sherlock WebObjects Apple Computer, Inc. AirMac Apple Computer, Inc. Java Java Sun Microsystems, Inc. UNIX X/Open Company, Ltd. Apple Computer, Inc. J /

3 Mac OS X Server LAN 18 LAN 19 LAN 2 23 DHCP 23 DHCP IP 24 IP 25 DHCP 25 DHCP 25 DHCP 25 IP 25 DHCP 26 DHCP 26 DHCP 26 DHCP 27 DHCP 27 DHCP 28 DHCP 28 3

4 28 IP 29 DHCP DNS 29 LDAP 30 WINS 30 DHCP IP DHCP 31 DHCP 32 DHCP 32 DHCP 32 DHCP 33 DHCP DNS 38 DNS 38 DNS BIND DNS 41 DNS 41 DNS DNS DNS 47 DNS 48 DNS 48 DNS 49 DNS 49 DNS 49 DNS 49 DNS 50 DNS 50 DNS 50 DNS DNS 4

5 52 DoS DNS 53 MX 55 NAT TCP/IP 57 1 IP IP IP Tiger Server 10.4 Panther Server IP 71 IP 72 IP IP 5

6 77 77 IP NAT 77 Web Apple DoS NAT 87 NAT 88 NAT LAN 89 NAT 89 NAT 90 NAT NAT 93 NAT 93 NAT 93 1 IP LAN 95 LAN VPN 99 VPN VPN 101 VPN 102 VPN 102 VPN 102 L2TP 102 PPTP 103 VPN 103 VPN 105 VPN 106 IP VPN 6

7 VPN 109 VPN 109 VPN 109 VPN 110 VPN 110 VPN NTP 117 NTP 118 NTP 118 NTP 119 NTP VLAN 121 VLAN 121 VLAN IPv6 124 IPv6 124 IPv6 124 IPv IPv6 125 IPv6 125 IPv

8

9 Mac OS X Server 10.4 Mac OS X Server DNS DHCP IP VPN NAT VLAN DHCP DHCP IP 37 3 DNS Mac OS X Server 59 4 IP 87 5 NAT NAT 1 IP 99 6 VPN LAN VPN NTP 9

10 121 8 VLAN VLAN IPv6 IPv6 IPv6 127 Web Mac OS X Server Finder Mac OS X Mac OS X Server 10

11 Mac OS X Server Mac OS X Server PDF Mac OS X Server Mac OS X AFP NFS FTP SMB/CIFS NetBoot Macintosh WebDAV WebMail Web Web DHCP DNS VPN NTP IP NAT QuickTime PDC BDC Windows Windows NT Mac OS X Server Mac OS X Server JBoss UNIX 11

12 Mac OS X Server IP Xgrid Xserve Mac OS X Server PDF Mac OS X Server Web

13 discussions.info.apple.com/jp 13

14

15 1 1 Mac OS X Server 10.4 IP x.1 x x 0 2 x 1 DHCP DHCP x.x DHCP VPN x x.254 VPN VPN L2TP x.x VPN VPN DHCP IP VPN x x.254 VPN 15

16 IP DHCP NAT NAT IP DNS DNS 2 / / / IP ISP XServe G5 2 Ethernet Ethernet 1 en0 Ethernet 2 en1 LAN IP LAN IP x.x 16 1

17 LAN LAN LAN Ethernet LAN IP DHCP VPN DNS DNS LAN 1 XServe Ethernet 1 en0 2 LAN XServe Ethernet 2 en1 3 / / / 4 Ethernet 1 WAN 5 Ethernet 2 LAN LAN LAN WAN Ethernet 2 Ethernet 3 6 LAN VPN VPN VPN VPN 99 6 VPN

18 IP DHCP 2 DHCP IP LAN IP UNIX LAN LAN LAN LAN Ethernet LAN AirMac LAN AirMac LAN AirMac IP DHCP VPN DNS DNS LAN 1 XServe Ethernet 1 en0 2 LAN XServe Ethernet 2 en1 3 AirMac 2 WAN 4 AirMac AirMac Ethernet DHCP 5 IP

19 7 / / / 8 Ethernet 1 WAN 9 Ethernet 2 LAN LAN LAN WAN Ethernet 2 Ethernet 3 10 LAN VPN VPN VPN VPN 99 6 VPN 11 IP DHCP 2 DHCP IP LAN IP NAT LAN LAN Mac OS X Server IP DHCP IP DNS LAN VPN AirMac Mac OS X Server 1 19

20 AirMac AirMac IP DHCP VPN DNS DNS LAN 1 XServe Ethernet 1 en0 2 AirMac 2 WAN XServe Ethernet 2 en1 3 AirMac AirMac Ethernet DHCP 4 IP 5 6 / / / 7 Ethernet 1 WAN 8 Ethernet 2 LAN LAN LAN WAN Ethernet 2 Ethernet 3 9 LAN VPN VPN VPN VPN 99 6 VPN 20 1

21 10 IP DHCP 2 DHCP IP LAN IP NAT LAN 1 21

22

23 2 DHCP 2 DHCP Dynamic Host Configuration Protocol IP DHCP IP DHCP DHCP DHCP IP DHCP IP IP IP DHCP DHCP DNS LDAP WINS DHCP IP DHCP IP IP IP IP IP DNS LDAP Lightweight Directory Access Protocol DHCP DHCP DHCP IP IP 23

24 IP IP IP IP IP DHCP IP VPN DHCP DHCP VPN DHCP VPN VPN 99 6 VPN IP IP Web IP IP IP IP DHCP DHCP DHCP IP DHCP DHCP IP DHCP DHCP 30 DHCP IP 24 2 DHCP

25 DHCP DHCP DHCP DHCP BootP DHCP BootP DHCP DHCP AirMac DHCP DHCP IP Mac OS X Server DHCP DHCP LDAP AirMac LDAP Ethernet AirMac Mac OS X Server DHCP AirMac DHCP AirMac DHCP LDAP DHCP DHCP IP IP IP ISP DHCP DHCP Mac OS X Server bootpd DHCP bootpd bootpd man bootpd 2 DHCP 25

26 DHCP Mac OS X Server DHCP DHCP 26 DHCP 1 IP 1 DHCP 27 DHCP 2 DHCP DHCP DHCP DHCP DHCP 32 DHCP 3 DHCP 26 DHCP DHCP Mac OS X Server DHCP LDAP DNS DHCP DHCP 1 DHCP 1 DHCP DHCP

27 DHCP 2 1 IP 1 DHCP IP IP IP LAN IP DNS LDAP WINS 29 DHCP DNS 29 LDAP 30 WINS 13 DHCP DHCP IP 1 DHCP / 6 2 DHCP 27

28 DNS LDAP WINS DHCP 7 DHCP IP 1 DHCP IP 1 DHCP IP IP 1 DHCP / DHCP

29 DHCP DNS DNS DHCP DNS 1 DHCP / 5 DNS 6 7 DHCP IP 8 LDAP LDAP DHCP LDAP LDAP Mac OS X Server LDAP LDAP LDAP LDAP IP LDAP LDAP 1 DHCP / 5 LDAP 6 LDAP IP 7 LDAP 8 LDAP 9 SSL LDAP 10 2 DHCP 29

30 WINS Windows DHCP Windows Windows Windows WINS/NBNS IP DHCP IP NBT broadcast NBDD NetBIOS ID Windows Windows WINS 1 DHCP / 5 WINS 6 WINS/NBNS IP 7 NBDD IP 8 NBT 9 NetBIOS ID 10 DHCP IP DHCP IP Ethernet MAC Ethernet 2 Ethernet DHCP

31 IP 1 DHCP Ethernet 6 IP 7 8 OK 9 1 DHCP / 6 OK 7 DHCP DHCP DHCP DHCP DHCP DHCP IP 1 DHCP 2 2 DHCP 31

32 DHCP DHCP DHCP quiet -q bootpd DHCP bootpd DHCP verbose -v bootpd 1 DHCP DHCP DHCP DHCP bootpd system.log DHCP 1 DHCP 2 DHCP DHCP IP 24 DHCP ID Ethernet ID DHCP 1 DHCP DHCP

33 DHCP DHCP IANA Internet Assigned Numbers Authority IP IP / / /16 DHCP NAT IP DHCP NAT IP NAT DHCP IP 93 1 IP LAN DHCP IP DHCP LDAP IP 4 IP LDAP Mac OS X Server 10.4 Mac OS X Server 10.4 DHCP IP IP DHCP IP DHCP 24 IP Mac OS X Server IP Ethernet IP 30 DHCP IP 2 DHCP 33

34 DHCP DHCP LDAP 29 LDAP Mac OS X IPv4 DHCP LDAP DHCP IP IP DHCP Netboot Netboot DHCP Netboot 33 NetBoot Netboot NetBoot NetBoot LDAP DHCP 34 2 DHCP

35 Web DNS LAN DHCP Web DNS DHCP IP 4 IP DHCP DHCP DHCP LDAP DHCP Windows 30 WINS DHCP 27 DHCP 27 DHCP DHCP 2 DHCP 35

36 RFC Request for Comments RFC RFC RFC Web DHCP RFC 2131 bootpd bootpd man bootpd 36 2 DHCP

37 3 DNS 3 Web IP DNS Domain Name System IP DNS IP IP DNS IP IP IP DNS ISP DNS ISP ISP IP DNS ISP DNS ISP DNS ISP ISP Mac OS X Server BIND Berkeley Internet Name Domain DNS BIND 37

38 DNS DNS DNS DNS DNS hostmaster DNS DNS DNS DNS BIND DNS DNS DNS Paul Albitz Cricket Liu O Reilly and Associates IP DNS TTL IP TTL DNS DNS IP DNS 1 IANA Internet Assigned Numbers Authority IANA DNS

39 IP DNS example.com host1.example.com mail.example.com primary. backup. example.com DNS IP ISP DNS ISP IP ISP 2 DNS DNS Mac OS X Server BIND 58 DNS Domain Name System DNS ISP DNS DNS 2 3 DNS DNS Web Mac OS X Server DNS 2 1 DNS 41 DNS 2 BIND BIND DNS Mac OS X Server 1 BIND 3 DNS 39

40 /etc/named.conf example.com /var/named/example.com.zone named.conf BIND controls inet DNS inet controls { inet port 54 allow {any;} keys { "rndc-key"; }; }; 3 DNS 41 DNS 4 DNS DNS 42 DNS Source of Authority SOA NS Mac OS X Server IP IP 5 DNS IP DNS DNS 46 DNS 6 MX Mail Exchange MX 53 MX 7 IP DNS IP 4 IP 40 3 DNS

41 8 DNS Mac OS X Server DNS 41 DNS DNS Mac OS X Server DNS DNS BIND DNS DNS DNS DNS DNS 1 DNS DNS DNS DNS DNS. 1 DNS DNS 41

42 IP DNS DNS DNS DNS DNS 1 DNS IP LAN IP BIND named.conf BIND DNS DNS 3 1 DNS 42 3 DNS

43 BIND BIND DNS DNS DNS DNS BIND BIND Source of Authority SOA NS 1 DNS SOA ns.example.com. 7 IP 8 9 TTL Time to Live DNS 10 3 DNS 43

44 1 DNS IP 8 OK 9 LAN 1 DNS DNS

45 1 DNS / 5 42 DNS 6 OK 1 DNS DNS BIND Mac OS X Server BIND /etc/named.conf /var/named/ BIND 9 DNS 3 DNS 45

46 1 BIND /etc/named.conf named.conf /var/named/ db.xyz.com xyz.com zone "xyz.com" IN { // Forward lookup zone for xyz.com type master; // It s a primary zone file "db.xyz.com"; // Zone info stored in /var/named/db.xyz.com allow-update { none; }; }; 2 /var/named/ 3 DNS DNS IP Web DNS IP mail.apple.com MailSrv473.apple.com IP DNS BIND BIND Mac OS X Server Mac OS X Server 46 3 DNS

47 DNS DNS IP IP IP 1 DNS 1 DNS / IP 9 A 10 CNAME 11 MX 53 MX 12 HINFO 13 3 DNS 47

48 TXT 7 ASCII ASCII B John 14 OK DNS DNS DNS 1 DNS / / 9 10 OK DNS 1 DNS / DNS

49 7 8 9 DNS DNS DNS DNS DNS DNS DNS BIND DNS DNS 1 DNS 2 DNS DNS DNS named.log DNS 1 DNS 2 3 DNS DNS 1 DNS DNS 49

50 4 DNS DNS 1 DNS DNS / /Logs/named.log DNS DNS DNS DNS DNS DNS DoS DNS DNS DNS IP A IP Web 50 3 DNS

51 DNS DNS DNS BIND Mac OS X Server DNS IP IP TCP 53 DNS m IP IP TCP 53 4 IP IP 53 TCP IP DNS IP IP DNS IP 3 DNS 51

52 DNS DNS BIND BIND BIND BIND BIND 1 vi emacs pico 2 named.conf 3 version "[your text, maybe we're not telling! ]"; 4 DoS DNS IP 70 IP ISP DNS ISP DNS DNS DNS DNS DNS LAN LAN DNS

53 IP BIND named.conf named.conf options {... allow-recursion{ /8; [your internal IP range of addresses, like /27]; }; }; BIND DNS DNS MX DNS reliable example.com MX MX 3 DNS 53

54 MX example.com 10 reliable.example.com 20 our-backup.example.com 30 last-resort.example.com MX MX MX DNS MX DNS DNS DNS MX Mail Exchange ISP DNS ISP MX DNS MX MX 1 DNS / IP 54 3 DNS

55 9 CNAME A 10 A 11 MX HINFO 14 TXT 2 B John 15 OK NAT NAT Network Address Translation NAT IP NAT NAT 87 5 NAT 3 DNS 55

56 DNS NAT IP NAT IP DNS DNS NAT NAT DNS 93 1 IP LAN NAT NAT NAT DNS NAT NAT NAT 90 Mac OS X DNS DNS.local DNS DNS BIND IP BIND IP 3 Web IP IP 3 1 DNS A B C B C A C A B Time-to-Live TCP/IP IP IP ISP 56 3 DNS

57 TCP/IP TCP/IP IANA Internet Assigned Numbers Authority IP IP / / /16 IP TCP/IP DNS TCP/IP DNS Web 1 IP 1 Web 1 IP 1 ftp.example.com mail.example.com IP 1 IP 1 DNS DNS DNS mail.example.com Web Finder Apple afp.example.com ftp.example.com ftp DNS 3 DNS 57

58 1 Web IP 1 IP 1 DNS DNS DNS Web DNS BIND Paul Albitz Cricket Liu O Reilly and Associates 2001 International Software Consortium Web DNS Resources Directory Request For Comments RFC Request for Comments RFC RFC RFC Web A PTR CNAME MX RFC 1035 AAAA RFC DNS

59 4 IP 4 Mac OS X Server IP IP IP IP IP Web FTP TCP Transmission Control Protocol UDP User Datagram Protocol 59

60 TCP UDP ICMP Internet Control Message Protocol IGMP Internet Group Management Protocol Secure Shell 22 IP Mac OS X Server 3 IP IP IP IP 60 4 IP

61 Web ipfw sysctl sysctl IPFilter /etc/hostconfig IPFILTER sysctl sysctl -w net.inet.ip.fw.enable=1 sysctl -w net.inet.ip.fw.enable=0 IPFilter Mac OS X Server IP 61

62 IP IP IP 66 IP IP IP IP IP IP IP IP CIDR Classless Inter Domain Routing IP / 1 32 IP IP / IP : CIDR IP

63 CIDR CIDR / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / IP 63

64 IP CIDR / : IP IP / / / IP IP IP 1 IP IP IP 64 4 IP

65 66 1 IP Mac OS X Server BIND 62 IP Web FTP IP IP 2 FTP FTP 3 IP IP IP 67 4 IP 68 5 IP 62 4 IP 65

66 UDP UDP UDP UDP UDP UDP 70 IP 6 FTP FTP 1 1 Tiger Server 10.4 Panther Server 10.3 Panther Server 10.3 Tiger Server 10.4 Panther10.3 Panther 10.3 TCP UDP IP FTP FTP 66 4 IP

67 1 2 IP 2 IP 10-net net IP CIDR /24 IP : IP any 7 OK 8 IP CIDR / IP 67

68 5 / 6 OK TCP UDP IP SSH Web Apple Windows FTP DNS/ DNS ICMP Echo Reply ping IGMP Internet Gateway Multicast Protocol PPTP VPN L2TP VPN QTSS itunes 68 4 IP

69 FTP FTP IP 7 IP TCP UDP 8 OK 9 4 IP 69

70 / 6 OK 7 IP IP IP IP IP IP IP IP CIDR /24 IP icmp esp ipencap IP

71 9 IP CIDR IP CIDR WAN LAN en0 en1 fw1 14 OK 15 IP IP Web Web IP / 6 OK 7 4 IP 71

72 IP IP m TCP UDP /etc/ipfilter/ip_address_groups.conf 4 ipfw /etc/ipfilter/ipfw.conf 5 ipfw -f flush 6 /etc/hostconfig IPFILTER=-YES IP

73 7 Mac OS X Server exit 8 9 ipfw(1) keep-state IP 73

74 ipfw IP /var/log/ipfw.log 74 4 IP

75 Dec 12 13:08:16 ballch5 mach_kernel: ipfw: Unreach TCP : :80 in via en :2190 Ethernet 0 Web Dec 12 13:20:15 mayalu6 mach_kernel: ipfw: 100 Accept TCP : :515 in via en :721 Ethernet 0 LPR Dec 12 13:33:15 smithy2 mach_kernel: ipfw: 10 Accept TCP : :660 out via lo0 NAT NAT unreach 4 IP 75

76 IP 5 6 Accept IP ipfw /etc/ipfilter/ipfw.conf.apple 5 /etc/ipfilter/ipfw.conf.apple ipfw 76 4 IP

77 IP IP NAT NAT Network Address Translation IP NAT Tiger Server NAT NAT NAT NAT NAT IP IP NAT NAT LAN LAN IP NAT IP NAT LAN NAT IP NAT LAN 93 1 IP LAN Web Web IP Web en IP 77

78 1 LAN / x 67 2 TCP Web LAN en2 70 IP 1 Web Web 5 Web Web Web 6 LAN Web IP Web Web Web IP

79 6 7 IP SMTP SMTP OK SMTP 13 Apple IP Apple Apple 6 4 IP 79

80 OK Apple 14 DoS TCP IP TCP Dinial of Service Attacks ping ICMP Echo Reply (incoming pings) 6 ICMP ping 80 4 IP

81 P2P P2P P2P P2P P2P Mac OS X Server P2P IP LAN P2P WAN 70 IP Mac OS X Server IP LAN WAN 70 IP LAN WAN 70 IP 4 IP 81

82 Mac OS X Mac OS X Server TCP UDP RFC Web TCP 7 echo RFC FTP RFC FTP RFC SSH Secure Shell 23 Telnet RFC SMTP RFC DNS RFC Finger RFC HTTP Web RFC Kerberos V5 KDC RFC POP3 RFC RPC RFC AUTH RFC sftp 119 NNTP RFC Network Time Server NTP RFC Windows 138 Windows 139 Windows RFC 100 SMB/CIFS 143 IMAP RFC AppleTalk 311 SSL AppleShare IP Web servermgrd DirectoryService 389 LDAP RFC 2251 Sherlock 2 LDAP 82 4 IP

83 TCP 407 Timbuktu 427 SLP 443 SSL HTTPS 445 Microsoft 497 Dantz Retrospect 514 syslog 515 LPR RFC netnews 548 AFP Apple 554 Real Time Streaming Protocol QTSS 591 FileMaker Web Mac OS X RPC NetInfo IMAP Mac OS X AppleShare IP 6.x 631 IPP 636 LDAP SSL AppleShare IP servermgrd 749 kadmind Kerberos changepw 985 NetInfo 993 SSL IMAP 995 SSL POP Web Objects JBoss RMI RMI/IIOP 1220 QTSS Admin 1694 IP RFC PPTP VPN RFC NFS 2236 Macintosh 2399 FileMaker 4 IP 83

84 TCP 3004 isync 3031 AppleEvent 3283 ARD MySQL 3632 XCode itunes 4111 XGrid 5003 FileMaker ichat ichat 5222 ichat 5223 ichat SSL 5269 ichat 5298 ichat 5432 ARD ARD 2.0 VNC 7070 Real Time Streaming Protocol QTSS 7777 ichat Web QTSS MP Tomcat JBoss RMI RMI/IIOP Tomcat JBoss 8080 Web Apache AIP Web Web itunes Radio 84 4 IP

85 UDP 7 echo 53 DNS 67 DHCP BootP NetBoot 68 DHCP 69 TFTP Trivial File Transfer Protocol 111 RPC 123 Network Time Protocol RFC WINS Windows 138 Windows NETBIOS 161 SNMP Simple Network Management Protocol 192 AirMac 427 SLP 497 Retrospect 500 VPN ISAKMP/IKE 513 who 514 Syslog 554 Real Time Streaming Protocol QTSS Mac OS X RPC NetInfo NetInfo NetInfo 1701 VPN L2TP 3283 ARD DNS mdnsresponder 2049 Network File System NFS Apple Apple Remote Desktop 4500 IKE NAT Traversal 5060 ichat ichat 4 IP 85

86 UDP 5353 DNS mdnsresponder QTSS RTP 7070 Real-Time Streaming Protocol QTSS ichat RTP RTCP ipfw IP ipfw man man ipfw Request For Comments RFC Request for Comments RFC RFC Web RFC RFC IANA Internet Assigned Number Authority TCP UDP Web Assigned Numbers RFC RFC IP

87 5 NAT 5 NAT Network Address Translation IP NAT IP 1 NAT NAT NAT NAT NAT NAT NAT Mac OS X Server DHCP DHCP DHCP 23 2 DHCP NAT Mac OS X Server NAT NAT NAT NAT NAT NAT IP 87

88 NAT LAN NAT LAN NAT 93 1 IP LAN 1 NAT Mac OS X Server 2 WAN LAN 2 NAT LAN IP LAN IP Mac OS X Server DHCP 3 IP WAN LAN 4 NAT 89 NAT NAT 89 NAT 7 NAT NAT 66 8 DHCP DHCP 2 DHCP 88 5 NAT

89 NAT NAT NAT NAT DHCP LAN NAT NAT LAN NAT 1 NAT 2 NAT NAT NAT LAN NAT 1 NAT 2 3 IP NAT 89

90 NAT IP IP Mac OS X Server NAT IP NAT IP Mac OS X Server LAN IP IP NAT LAN NAT 1 NAT 2 3 IP 4 NAT NAT IP Web NAT 80 TCP Web sudo plist plist /etc/nat/natd.conf.apple NAT NAT /etc/nat/natd.conf.apple plist 90 5 NAT

91 1 /etc/natd.plist NAT plist sudo cp /etc/nat/natd.plist.default /etc/natd.plist 2 /etc/natd.plist 2 </dict> </plist> XML <key>redirect_port</key> <array> <dict> <key>proto</key> <string>tcp UDP</string> <key>targetip</key> <string>lan_ip</string> <key>targetportrange</key> <string>lan_ip_range</string> <key>aliasip</key> <string>wan_ip</string> <key>aliasportrange</key> <string>wan_port_range</string> </dict> </array> 3 serveradmin 4 NAT 89 NAT 5 1 IP WAN LAN WAN 10 LAN 10 5 NAT 91

92 WAN TCP 80 Web LAN TCP 80 Web /etc/natd.plist <key>redirect_port</key> <array> <dict> <key>proto</key> <string>tcp</string> <key>targetip</key> <string> </string> <key>targetportrange</key> <string>80</string> <key>aliasip</key> <string> </string> <key>aliasportrange</key> <string>80</string> </dict> </array> WAN TCP UDP NetInfo LAN /etc/natd.plist <key>redirect_port</key> <array> <dict> <key>proto</key> <string>tcp</string> <key>targetip</key> <string> </string> <key>targetportrange</key> <string> </string> <key>aliasip</key> <string> </string> <key>aliasportrange</key> <string> </string> </dict> </array> <array> <dict> <key>proto</key> <string>udp</string> <key>targetip</key> <string> </string> <key>targetportrange</key> <string> </string> <key>aliasip</key> <string> </string> 92 5 NAT

93 <key>aliasportrange</key> <string> </string> </dict> </array> NAT NAT NAT NAT NAT NAT 1 NAT 2 NAT NAT 1 IP LAN NAT LAN IP NAT LAN 15 NAT IP 2 Mac OS X Server Ethernet PCI Ethernet IP ISP IP ISP ) / : NAT 93

94 DHCP IPv4 NAT DHCP IP NAT LAN 1 2 Ethernet WAN 3 Ethernet IP ISP IP DNS PCI Ethernet 1 IP IP DNS DHCP 8 LAN < > IP IP en < > DNS DHCP 24 9 DHCP 10 NAT 11 NAT Ethernet NAT

95 13 NAT /24 LAN IP LAN LAN Web SSH LAN Web SSH LAN LAN 1 IP LAN LAN LAN LAN DHCP NAT Web SSH domain.example.com NAT Web NAT Web 1 NAT LAN NAT DNS IP 3 5 NAT 95

96 NAT DNS IP NAT LAN NAT 2 Ethernet PCI Ethernet IP ISP / : DHCP IPv4 NAT DHCP IP 1 2 DHCP 3 LAN < > IP IP en < > DNS <ISP > Web <Web Ethernet > < Ethernet > DHCP DHCP IP 4 DHCP 5 NAT 6 NAT Ethernet 96 5 NAT

97 TCP 80 Web TCP NAT LAN 2 Web SMTP DNS 2 DNS ISP IP A IP mail.example.com MX A CNAME Web mail.example.com NAT DHCP IP Ethernet Web IP natd NAT natd man man natd 5 NAT 97

98 Request For Comments RFC Request for Comments RFC RFC RFC Web NAT RFC 1631 RFC NAT

99 6 VPN 6 VPN Virtual Private Network 2 LAN VPN LAN LAN VPN VPN VPN WAN VPN ISP VPN LAN VPN VPN VPN VPN VPN VPN ID 99

100 L2TP/IPSec Layer Two Tunnelling Protocol, Secure Internet Protocol L2TP/IPSec IPSec Cisco L2F IPSec Verisign L2TP Kerberos Mac OS X Server VPN PPTP Point to Point Tunneling Protocol PPTP VPN Windows VPN PPTP 128 VPN 40 PPTP Windows Mac OS X 10.2.x Mac OS X Server L2TP VPN Kerberos v5 Microsoft Challenge Handshake Authentication Protocol version 2 MS-CHAPv2 Mac OS X Server PPTP VPN MS-CHAPv2 Kerberos Kerberos Key Distribution Server MS-CHAPv2 Kerberos VPN Windows Mac OS X Server PPTP VPN PPTP RSA Security SecurID VPN / /Preferences/SystemConfiguration/com.apple.RemoteAccessServers.plist 107 VPN SecurID VPN

101 VPN VPN Virtual Private Network L2TP/IPSec PPTP Mac OS X x X X Mac OS X 10.2.x X Windows X Windows XP X Linux Unix X X L2TP 8 12 PPTP 128 PPTP 40 VPN Mac OS X Server VPN DHCP DHCP VPN IP DHCP DHCP 23 2 DHCP VPN IP IP LAN VPN IP ISP VPN IP VPN 6 VPN 101

102 VPN VPN VPN VPN VPN 1 VPN L2TP L2TP IPSec IP VPN L2TP PPTP L2TP 1 VPN 2 3 L2TP 4 L2TP over IPsec 5 IP 6 IP 7 PPP Kerberos Kerberos MS-CHAPv2 8 9 PPTP PPTP IP VPN L2TP PPTP VPN

103 PPTP 1 VPN 2 3 PPTP 4 PPTP VPN 6 IP 7 VPN VPN IP DHCP DNS 1 VPN DNS IP 5 6 VPN VPN VPN ISP VPN LAN IP VPN LAN VPN 6 VPN 103

104 VPN VPN VPN VPN DNS VPN LAN IP 17.x.x.x VPN Web URL LPR VPN 17.x.x.x LAN LAN Web 17.x.x.x 17.x.x.x Private LAN VPN 17.x.x.x IP VPN 17.x.x.x LAN x Public 17.x.x.x x VPN Private VPN Public VPN VPN VPN

105 1 VPN a b a VPN b 7 OK 8 VPN VPN VPN VPN VPN Mac OS X Server ACL ACL ACL VPN 1 VPN VPN VPN 105

106 IP VPN IP VPN VPN IP VPN Mac OS X Server IP IP VPN VPN L2TP UDP VPN PPTP TCP 7 VPN L2TP PPTP 8 9 VPN IP CIDR VPN IP 10 VPN IP CIDR 11 WAN 12 OK VPN

107 LDAP VPN-PPTP Mac OS X 10.4 LDAP PPTP-VPN PPTP Mac OS X Server VPN Mac OS X Server /usr/sbin/vpnaddkeyagentuser LDAP VPN LDAP sudo /usr/sbin/vpnaddkeyagentuser /LDAPv3/ VPN LDAP LDAP LDAP IP LDAP sudo /usr/sbin/vpnaddkeyagentuser /LDAPv3/ a VPN LDAP b LDAP LDAP LDAP LDAP VPN PPTP 3 VPN PPTP 4 VPN VPN SecurID RSA Security SecurID L2TP PPTP Web 6 VPN 107

108 Mac OS X Server VPN SecurID VPN RSA Security SecurID VPN SecurID 1 RSA Security SecurID sdconf.rec SecurID Mac OS X Server /var/ace 1 a / / / b sudo mkdir /var/ace Return c Return d Dock Finder e f /var/ace g h sdconf.rec SecurID ace i ace 2 Mac OS X Server VPN EAP-SecurID PPTP 2 1 # sudo serveradmin settings vpn:servers:com.apple.ppp.pptp:ppp:authenticatoreapplugins:_array_index : 0 = "EAP-RSA" # sudo serveradmin settings vpn:servers:com.apple.ppp.pptp:ppp:authenticatorprotocol:_array_index:0 = "EAP" L2TP 2 # sudo serveradmin settings vpn:servers:com.apple.ppp.l2tp:ppp:authenticatoreapplugins:_array_index : 0 = "EAP-RSA" # sudo serveradmin settings vpn:servers:com.apple.ppp.l2tp:ppp:authenticatorprotocol:_array_index:0 = "EAP" SecurID Mac OS X Server VPN VPN

109 VPN VPN VPN VPN VPN L2TP PPTP 1 VPN 2 VPN VPN VPN VPN VPN 1 VPN VPN VPN VPN /var/log/ppp/ vpnd.log 1 VPN 2 6 VPN 109

110 VPN VPN IP IP 1 VPN 2 VPN VPN VPN LAN L2TP prdwkj49fd!254 gateway.example.com / : VPN L2TP LAN 1 VPN 1 VPN L2TP 5 prdwkj49fd!254 IPSec VPN

111 6 VPN IP DHCP VPN IP DHCP VPN LAN DNS IP VPN VPN 2 1 VPN 67 2 L2TP VPN 68 3 VPN 4 3 Mac OS X 1 2 VPN 3 L2TP over IPSec 4 5 a gateway.example.com b < > c < > d prdwkj49fd!254 6 OK 6 VPN 111

112 VPN LAN 1 VPN LAN Apple 110 m 1 12 IP m 2 3 Apple VPN DNS VPN VPN VPN 2 2 LAN VPN LAN LAN Mac OS X Server s2svpnadmin site-to-site VPN admin s2svpnadmin sudo s2svpnadmin man s2svpnadmin LAN LAN s2svpnadmin s2svpnadmin VPN L2TP/IPSec VPN PPTP VPN

113 L2TP prdwkj49fd!254 A.B.C.D W.X.Y.Z / : / : LAN L2TP LAN 1 s2svpnadmin 1 s2svpnadmin sudo s2svpnadmin 2 Configure a new site-to-site server 3 1 site_1 4 IP 1 A.B.C.D 2 W.X.Y.Z 5 IP 1 W.X.Y.Z 2 A.B.C.D 6 s prdwkj49fd!254 c CIDR CIDR / VPN 113

114 CIDR CIDR / Return LAN LAN 13 y site_1 14 s2svpnadmin 2 1 LAN IP 1 A.B.C.D/32 2 W.X.Y.Z/ L2TP VPN 68 3 IP 1 UDP A.B.C.D W.X.Y.Z isakmp 2 UDP W.X.Y.Z A.B.C.D isakmp VPN

115 3 esp A.B.C.D W.X.Y.Z 4 esp W.X.Y.Z A.B.C.D 5 ipencap A.B.C.D W.X.Y.Z 6 ipencap W.X.Y.Z A.B.C.D 70 IP VPN 1 VPN VPN s2svpnadmin 2 LAN LAN ping 6 VPN 115

116 L2TP/IPSec IETF Internet Engineering Task Force L2TP/IPSec Web Request For Comments RFC Request for Comments RFC RFC RFC Web L2TP RFC 2661 PPTP RFC 2637 Kerberos 5 RFC VPN

117 7 NTP 7 NTP Network Time Protocol NTP Cookie Web NTP NTP UTC Universal Time Coordinated UTC UTC NTP UTC Stratum 1 Stratum 2 3 Stratum 3 NTP UTC 117

118 NTP Mac OS X Server NTP NTP NTP Stratum 2 time.apple.com NTP UDP IP NTP NTP NTP

119 NTP NTP time.example.com IP 6 NTP NTP Web NTP Web Request For Comments RFC Request for Comments RFC RFC RFC Web NTP 3 RFC NTP 119

120

121 8 VLAN 8 VLAN Mac OS X Server Xserve Ethernet PCI Ethernet 802.1q VLAN Virtual Local Area Network VLAN LAN LAN Xserve G5 VLAN IEEE 802.1q VLAN VLAN VLAN VLAN 802.1Q Ethernet 802.1Q Ethernet VLAN Xserve G5 VLAN VLAN 5 VLAN Ethernet 6 VLAN 121

122 7 VLAN OK VLAN VLAN ID VID VID VID 8 VLAN VLAN VLAN VLAN IEEE standards.ieee.org/getieee802/download/802.1q-1998.pdf VLAN

123 9 IPv6 9 IPv6 Internet Protocol Version 6 IPv6 Internet Protocol IP Version 4 IPv4 IP Internet Protocol IPv4 IP IPv IPv4 IPv4 NAT Network Address Translation NAT 2 IPv NAT IPv6 IPv4 Mac OS X Server IPv6 IPv6 IPv6 123

124 IPv6 Mac OS X Server IPv6 DNS BIND IP POP/IMAP/SMTP SMB/CIFS Web Apache 2 Mac OS X Server IPv6 ping6 traceroute6 IPv6 IPv6 IPv6 IPv6 IPv6 IPv4 IPv IPv6 16 IPv6 xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx IPv6 : 16 E3C5:0000:0000:0000:0000:4AC8:C0A8:6420 E3C5:0:0:0:0:4AC8:C0A8:6420 IPv6 0 0 E3C5::4AC8:C0A8: IPv6

125 IPv4 IPv6 IPv4 IPv6 4 2 IPv4 E3C5:4AC8: IPv6 IPv6 2 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:1 IPv IPv6 IPv6 Ethernet 1 IPv6 1 IPv6 IPv6 IPv6 IPv4 IPv6 IPv6 3 IP IPv6 IPv6 IPv4 IPv6 FF IPv6 125

126 Internet Protocol Version 6 Web IPv6 Web IPv6 Request For Comments RFC Request for Comments RFC RFC RFC Web 29 IPv6 RFC Web IPv6

127 Mac OS X Server 10.4 ACL Access Control List 1 Challenge Handshake Authentication Protocol CHAP Challenge Handshake Authentication Protocol DHCP Dynamic Host Configuration Protocol IP DHCP DHCP DHCP IP DHCP IP DHCP DNS Domain Name System IP DNS IP DNS Domain Name System IP DNS Domain Name System IP Domain Name System Dynamic Host Configuration Protocol EAP Extensible Authentication Protocol 1 127

128 Ethernet 1 TCP/IP Ethernet ID FTP File Transfer Protocol FTP FTP FTP GB 1,073,741, HTTP Hypertext Transfer Protocol World Wide Web Web HTTP Web HTML Hypertext Transfer Protocol IANA Internet Assigned Numbers Authority IP ICMP Internet Control Message Protocol ICMP 2 IEEE Institute of Electrical and Electronics Engineers, Inc. IGMP Internet Group Management Protocol QuickTime Streaming Server QTSS SLP Service Location Protocol Internet Assigned Numbers Authority Internet Control Message Protocol Internet Group Management Protocol Internet Message Access Protocol Internet Protocol IP Internet Protocol IPv4 TCP Transmission Control Protocol IP TCP 128

129 IPSec IP L2TP VPN IPSec IPSec IP IPv4 IPv6 Internet Protocol 6 IP IPv4 IPv6 IP IP IP ISP Internet service provider Web KB 1, L2TP Layer Two Tunnelling Protocol VPN Cisco L2F PPTP L2TP IPSec LAN WAN LDAP Lightweight Directory Access Protocol Lightweight Directory Access Protocol Mac OS X Mac OS X Macintosh UNIX Mac OS X Server Mac Windows UNIX Linux MAC Media Access Control AirMac MAC AirMac ID Media Access Control Microsoft Challenge Handshake Authentication Protocol 129

130 MS-CHAP Microsoft Challenge Handshake Authentication Protocol Windows VPN MS-CHAP Windows CHAP MX DNS 1 MX MX NAT Network Address Translation 1 IP IP 1 IP IP NetInfo 1 Network Address Translation NTP Network Time Protocol 1 NTP Point to Point Tunneling Protocol Post Office Protocol PPTP Point to Point Tunneling Protocol VPN Windows VPN PTR IP IPv4 DNS DNS QTSS QuickTime Streaming Server QuickTime Streaming Server Secure Sockets Layer SLP DA Service Location Protocol Directory Agent SLP SLP/DA 130

131 SMTP Simple Mail Transfer Protocol POP IMAP SPAM SSL Secure Sockets Layer SSL TLS Transport Level Security SSL Secure Sockets Layer SSL TLS Transport Level Security Stratum 1 Network Time Protocol NTP UTC Stratum 2 Stratum 3 TCP Transmission Control Protocol IP Internet Protocol IP TCP Time-To-Live Transmission Control Protocol TTL Time-To-Live DNS IP TTL DNS TXT DNS 1 DNS UCE UDP User Datagram Protocol 1 Internet Protocol IP TCP UDP User Datagram Protocol UTC UTC UTC Virtual Private Network 131

132 VPN Virtual Private Network VPN WAN LAN WAN Windows Internet Naming Service WINS Windows Internet Naming Service Windows IP WINS WLAN permissions 4 privileges TCP/IP 132

133 LDAP NetInfo Active Directory BSD L2TP VPN LAN WAN Mac OS X SLP SMB/CIFS Finder SLP Windows Finder < > Bluetooth Apple Remote Desktop 133

134 Web denial of service attack DoS attack 1 ping IP DNS IP DNS DNS DNS.com.net.us.uk TLD www example com 2 IP IP 1 QuickTime Player QTSS SDP ID Mac OS X Server x.509 CA 1 134

135 mail.apple.com MailSrv473.apple.com IP IP DNS DNS 1 IP IP IP Ethernet AirMac FireWire Xsan QTSS TCP UDP IP 135

136 1 0 1 Mac OS X Server IP IP IP IP IP DNS DNS 1 Ethernet 2 IP QuickTime Streaming Server 1 Web 2 TCP UDP 136

137 UNIX Mac OS X Server NFS /etc/hostconfig HOSTNAME=some-host-name DHCP BootP IP DNS IP localhost DNS DNS DNS QuickTime 1 DNS IP ZeroConf Mac OS X Server Mac OS X 1 RSTP IP IP DHCP IP 137

138 QuickTime Streaming Server 1 SMTP SMTP SMTP DNS IP.local billscomputer.local DNS 1 IP 138

139 A AirMac DHCP 25 B BIND 37, C CIDR 62, 64 D DHCP DHCP AirMac 25 DHCP DNS DNS 29 LDAP IP 28 LDAP 29 WINS 30, DNS DHCP DoS 80 Dynamic Host Configuration Protocol DHCP I IANA 38 Internet Gateway Multicast Protocol IGMP Internet Protocol Version 6 IPv6 IPv IP DHCP 23 DHCP 28 DHCP 23 IPv

140 IP 31 IP 59 61, DoS , , IP M Mac OS X Server Mac OS X Mail Exchange MX MX Mail Exchange 40, 54 MX 53 N NAT NetBoot 32 NTP S Stratum 117 T TCP/IP TCP U UDP 85 UTC Universal Time Coordinated 117 V VPN , 32, 78, 79, 94, 95, 96, , IP 24 Stratum 117 IP 24 38, TCP/IP , IP Mac OS X TCP UDP

141 DNS DHCP 32 DNS 49 IP DHCP