Admin Forces Training
| OpenBSD Jumpstart | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| OpenBSD Intro | BSD | Introduction to OpenBSD | |
| Configure doas | BSD | Execute commands as root | |
| Patch your system | BSD | Patch your system | |
| Update firmware | BSD | Update firmware | |
| Installing Packages | BSD | Install new software | |
| Good Questions | Civics | How to Ask Good Questions | |
| IRCNow Mailing Lists | Civics | Sign up to IRCNow Mailing lists | Extend VPS for 1 week |
| Lesson | Topic | Description | Reward |
|---|---|---|---|
| Self-Admin | Civics | Admin your network | |
| Login classes | BSD | Configure login classes | |
| netcat IRC | Network | Troubleshoot IRC with netcat | |
| netcat | Network | Troubleshoot applications with netcat | |
| rcctl | BSD | Start services automatically | Extend VPS 1 week |
| Web Server | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Freedom to Fork | Civics | Freedom to Fork | |
| Intro to Chroot | BSD | Learn about Chroots | |
| Simple OpenHTTPd | Web | Host your own web server | |
| OpenHTTPd Website | Web | Set up your website | Extend VPS 1 week |
| netcat HTTP | Network | Troubleshoot webserver with netcat | |
| Telnet HTTP | Network | Troubleshoot webserver with telnet | |
| acme-client | Security | Request an SSL cert | |
| OpenHTTPd TLS | Web | Provide TLS for webpages | |
| OpenSSL HTTP | Network | Test TLS for webpages with OpenSSL | |
| Save OpenSSL cert | Network | Save OpenSSL cert | |
| Multi-user OpenHTTPd | Web | Configure webserver for multiple domains | |
| Open Proxies | Web | Avoid blacklists by closing open proxies | |
| OpenHTTPd Chroot | Web | OpenHTTPd chroot environment | |
| OpenHTTPd Perl | Web | Install Perl inside OpenHTTPd chroot | Extend VPS 1 week |
| slowcgi? | Web | Configure slowcgi | |
| TLS | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| TLS overview? | Network | TLS introduction | |
| TLS overview? | Network | TLS overview | |
| Certificate Authorities | Network | TLS Certificate Authorities | |
| Lesson | Topic | Description | Reward |
|---|---|---|---|
| Free Press | Civics | Freedom of Speech and of the Press | |
| Dogfooding | Civics | Eat your own dogfood |
| IRC Bouncer | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Software Freedom | Civics | Software Freedom | |
| TLS Acceleration | Security | Provide TLS for multiple services | |
| TLS Acceleration (multiple) | Security | Encrypt traffic with TLS for multiple services | |
| TCP/IP Networking | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Religious Liberty | Civics | Freedom of Religion | |
| TCP/IP Networking | Network | Learn Basics of TCP/IP | |
| IPv4 Networking | Network | Learn IPv4 Networking | |
| IPv6 Networking | Network | Learn IPv6 Networking | |
| TCP/IP sockets? | Network | Learn Basics of TCP/IP sockets | |
| IP netmasks? | Network | Learn Basics of IP netmasks | |
| TCP/UDP ports? | Network | Learn Basics of TCP/UDP ports | |
| My IP Address | Network | What's my IP Address? | |
| tcpbench | Network | Benchmark TCP/IP throughput | |
| ping | Network | Troubleshoot networking with ping | |
| traceroute? | Network | Trace packet route | |
| dig | Network | Troubleshoot DNS servers and records | Extend VPS 1 week |
| ifconfig? | Network | ifconfig guide | |
| Changing addresses | Network | Changing network addresses | |
| Static Networking | Network | ||
| Autoconf Networking | Network | ||
| Configure ifstated? | Network | Configure ifstated | |
| arp? | Network | Address resolution protocol | |
| ndp? | Network | Neighbor discovery protocol | |
| resolv.conf? | Network | Configuring resolv.conf | |
| resolvd? | Network | Using resolvd | |
| Route | Network | Configure route paths | |
| hostname.if route | Network | Add routes to hostname.if at bootup | |
| netstat? | Network | Show network status | |
| Route source address | Network | Configure routing source address | Extend VPS 1 week |
| Wireless | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| hostap | Network | Set up Host Access Point | |
| hostapd? | Network | Synchronize Host Access Points | |
| Packet Filter | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Open For Everyone | Civics | ||
| pf.conf? | Network | Configure Packet Filter | |
| Packet Filter | Network | Setup firewall with Packet Filter | |
| NAT with packet filter? | Network | NAT with Packet Filter | |
| Whitelisting? | Network | Whitelisting | |
| Debugging PF rulesets? | Network | Debugging PF rulesets | |
| rdr-to? | Network | rdr-to | |
| Traffic shaping? | Network | Traffic shaping | |
| pflog? | Network | pflog | |
| authpf? | Network | authpf | |
| testing rulesets? | Network | Testing PF rulesets | |
| NAT64 with packet filter? | Network | NAT6 with packetfilter | |
| ftp-proxy? | Network | ftp-proxy | |
| DMZ? | Network | DMZ | |
| DDoS Defense | Network | Defend against DDoS Attacks | |
| tcpdump | Network | Read network packets | |
| SSDP attack | Network | ||
| TCP ack flood | Network | ||
| TCP reset flood | Network | ||
| UDP Flood | Network | ||
| amplification attack | Network | ||
| PF Stable | Network | Sample PF Firewall for Stable | |
| PF Testing | Network | Sample PF Firewall for Testing | |
| Packet Filter | Network | PF Guide | Extend VPS 1 week |
| pfctl? | Network | PF Guide | Control packet filter |
| Networking | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| WiFi | Network | Configure WiFi | |
| WiFi to Ethernet | Network | WiFi to Ethernet | |
| bridge? | Network | Bridge interface | |
| vlan | Network | vlan interface | |
| veb | Network | veb interface | |
| vether | Network | Virtual Ethernet interface | |
| carp? | Network | CARP interface | |
| gre? | Network | GRE interface | |
| mgre? | Network | MGRE interface | |
| egre? | Network | EGRE interface | |
| eoip? | Network | eoip interface | |
| etherip? | Network | etherip interface | |
| vxlan? | Network | vxlan interface | |
| mpe? | Network | mpe interface | |
| mpip? | Network | mpip interface | |
| mpw? | Network | mpw interface | |
| bpe? | Network | bpe interface | |
| pppoe? | Network | pppoe interface | |
| sppp? | Network | sppp interface | |
| tpmr? | Network | tpmr interface | |
| trunk? | Network | trunk interface | |
| aggr? | Network | aggr interface | |
| urndis? | Network | urndis interface | |
| pflow? | Network | pflow interface | |
| pfsync? | Network | pfsync interface | |
| 6-in-4 gre (vmm) | Network | Tunnel IPv6 inside IPv4 with GRE (vmm) | |
| 6-in-4 gre | Network | Tunnel IPv6 inside IPv4 with GRE | |
| 4-in-6 gre? | Network | Tunnel IPv4 inside IPv6 with GRE | |
| wg | Network | WireGuard interface | |
| tap? | Network | Ethernet tunnel pseudo-device interface | |
| tun? | Network | Network tunnel pseudo-device interface | |
| Domain Name Lookup | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| DNS Overview | DNS | Learn the Domain Name System | |
| unwind | Network | Validating DNS resolver | |
| unbound | DNS | Configure a local caching nameserver | |
| DNSSec for Unbound? | DNS | Add DNSSec for unbound | |
| dig | DNS | Troubleshoot DNS records with dig | |
| host | DNS | Troubleshoot DNS records with host | |
| hostname | DNS | Set hostname | |
| Configure /etc/hosts | BSD | Host and network name database | Apply for IRC operator |
| Name Server | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Become a Netizen | Civics | ||
| Netizen Rights | Civics | ||
| DNS Records | DNS | Understand DNS record types | |
| Name Registrars | DNS | Choose a name registrar | |
| FQDN | DNS | Understand FQDN and $ORIGIN | |
| Configure NSD | DNS | Configure name server for custom domains | |
| Zone File | DNS | ||
| NSD Zone | DNS | Extend VPS 1 week | |
| nsd master slave | DNS | ||
| Troubleshooting NSD | DNS | ||
| rDNS | DNS | Configure reverse DNS for vhosts and email | |
| IPv4 rDNS | DNS | Configure IPv4 reverse DNS | |
| IPv6 rDNS | DNS | Configure IPv6 reverse DNS | Extend VPS 1 week |
| Lesson | Topic | Description | Reward |
|---|---|---|---|
| Unix Work Ethic | Civics | ||
| vhost | DNS | Create custom vhost | |
| identd | Security | Provide ident to stop abuse |
| Mail Server | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Federation | Civics | ||
| OpenSMTPd (with Maildir) | Configure your mail server (using Maildir) | ||
| DNS for Mail | Create DNS records for email | ||
| SPF | Configure SPF records to avoid the spam folder | ||
| DKIM | Configure DKIM records to avoid the SPAM folder | ||
| DMARC | Configure DMARC records to block phishing and spam | ||
| netcat SMTP | Network | Troubleshoot SMTP with netcat | |
| SMTP Testing | Send a test letter | ||
| Getting inboxed | Getting inboxed | ||
| Open Mail Relay | Block open mail relay to avoid sending spam | ||
| smtp? | SMTP client | ||
| spamd? | Configure spam filter | ||
| aliases? | Configure aliases for mail | ||
| Simple Network Management Protocol | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| snmpd? | SNMP | Configure SNMPd | |
| snmp? | SNMP | Configure SNMP | |
| sensorsd? | BSD | sensorsd |
| LDAP | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| ldapd? | LDAP | Configure ldapd | |
| Lesson | Topic | Description | Reward |
|---|---|---|---|
| Servers' Rights | Civics | Servers' Rights | |
| Minutemin's Code | Civics | Recite the Code of Honor |
| Version Control | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Call of Duty | Civics | The Call of Duty | |
| Restore from CVSweb | Code | Learn how to restore files with CVSweb | |
| got | Code | Set up got version control (clone of git) | |
| got repo | Code | Set up got repo | |
| got server | Code | Set up got server | |
| got mirror | Code | Set up got mirror | |
| gotweb | Code | Set up got web access | Extend VPS 1 week |
| Disk Setup and Backups | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Minutemin's Server | Civics | The Minutemin's Server | |
| dump | BSD | Backup a partition | |
| openrsync | BSD | Backup and sync files | |
| fdisk | BSD | Partition Hard Disk | |
| disklabel | BSD | Edit Partitions | |
| disklabel partitioning | BSD | Partition New Hard Disk | |
| newfs | BSD | Construct a new filesystem | |
| mount | BSD | Mount partitions | |
| newdisk | BSD | Add a New Hard Disk | |
| mfs? | BSD | Construct a memory-based filesystem | |
| FFS | BSD | Learn about the Fast Filesystem | |
| fsck? | BSD | Filesystem check consistency check | |
| quota | BSD | Edit disk quotas | |
| growfs | BSD | Grow a Disk Partition | Get shell account on server |
| RAID | |||
|---|---|---|---|
| softraid | BSD | Configuring software RAID | |
| Rebuild softraid | BSD | Rebuilding software RAID | |
| File servers | |||
|---|---|---|---|
| nfsd? | BSD | Configure NFS | |
| nfsd? | BSD | Serve files over NFS | |
| mount_nfs | BSD | Mount NFS filesystems | |
| nfsd? | BSD | Automatically mount NFS filesystems | |
| ftpd? | BSD | Serve files over FTP | |
| tftpd? | BSD | Serve files over TFTP | |
| Text Processing | |||
|---|---|---|---|
| sed | BSD | sed scripting | |
| awk | BSD | awk scripting | |
| roff? | BSD | roff | |
| Shell Scripting | |||
|---|---|---|---|
| ksh intro? | BSD | shell scripting | |
| perl intro | BSD | perl scripting | |
| Virtual Machine | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| VMM Intro | BSD | Intro to the VMM Hypervisor | |
| Vmctl User Guide | BSD | Control your VPS | |
| cu? | BSD | Serial terminal emulator | |
| Add disk to VM? | BSD | Add new storage disk to VPS | |
| Reinstall VM | BSD | Reinstall OpenBSD inside VMM | |
| Install OpenBSD inside VMM | BSD | Install OpenBSD inside VMM | |
| Install OpenBSD | BSD | Install OpenBSD | |
| Upgrade OpenBSD | BSD | Upgrade to OpenBSD | |
| OpenBSD Sysupgrade | BSD | Sysupgrade to OpenBSD | |
| Vmm Sysupgrade | BSD | Sysupgrade OpenBSD VMM Host | |
| sysmerge? | BSD | Merge conf files after upgrade | |
| bsd.rd | BSD | Install/Upgrade/Repair with Ramdisk | |
| Single User Mode | BSD | Boot OpenBSD into single user mode | |
| Reset root password | BSD | Reset root password | |
| autoinstall? | BSD | Unattended autoinstall | |
| VMM Hosting | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Configure VMM | Network | Offer Hosting with VMM | |
| Hosting Providers | Network | Choose a Hosting Provider | |
| Configure DHCP server | Network | Configure DHCP server | |
| Configure rad server | Network | Set up Router Advertisements for IPv6 | |
| Configure slaacd daemon? | Network | Configure slaacd daemon | |
| diskless? | BSD | Run OpenBSD on diskless systems | Acquire admin access |
| System Administration | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| ed | BSD | ed text editor | |
| tar? | BSD | Tape archives | |
| Change editor | BSD | Change default editor | |
| ksh history | BSD | Add history for shell commands | |
| Editing crontab | BSD | Editing crontab | |
| adduser | BSD | Addusers | |
| group? | BSD | Manage groups | |
| localtime | BSD | Set time zone | |
| Write image to usb | BSD | Write image to USB | |
| symbolic links | BSD | Create symbolic links | |
| fstab | BSD | Edit filesystem table | |
| dmesg | BSD | Display system message buffer | |
| hier | BSD | OpenBSD filesystem hierarchy | |
| ps | BSD | Monitor Processes | |
| renice? | BSD | Renice processes | |
| fstat? | Network | Show file status | |
| fuser? | Network | Show process using a file | |
| kill | BSD | Send signals to processes | |
| kernel panics | BSD | Dealing with kernel panics | |
| sysctl | BSD | Getting and setting kernel state | |
| swapctl | BSD | Manage system swap space | |
| OOM error | BSD | Out of memory error | |
| atactl | BSD | Get disk information | |
| BSD | rc.d | ||
| BSD | rc.conf | ||
| accton? | BSD | accton | |
| vipw | BSD | Edit the password file | Extend VPS 1 week |
| System Bootup | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| rc.conf? | BSD | System daemon configuration | |
| System Logging | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| syslogd | BSD | Configure system logging | |
| Remote syslogd | BSD | Configure remote system logging | |
| newsyslog? | BSD | Log rotation | |
| System Logging | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| send? | BSD | sendbug | |
| OpenBSD mailing list? | BSD | OpenBSD mailing list | |
| Civics | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Independence | Civics | Declaration of Network Independence | |
| Constitution | Civics | Read the Constitution and Bill of Rights | |
| United We Serve | Civics | ||
| Privacy | Civics | Right to Privacy | |
| Homestead VPS | Civics | ||
| Made on IRC | Civics | ||
| The Startup Dream | Civics | ||
| Due Process | Civics | ||
| Checks and Balances | Civics | ||
| Rule by Law | Civics | Extend VPS 1 week | |
| Miscellaneous | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| ports | BSD | Install software from ports tree | |
| pkg_add updates? | BSD | Keep software updated | |
| ntpd | Network | Update date and time from network automatically | Extend VPS 1 week |
| Stopping Abuse | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Abuse Guide? | Security | Investigation techniques to report criminals | |
| Team Security | Security | Prevent security leaks | Extend VPS 1 week |
| Security | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Manage Passwords | Shell | Create secure passwords | |
| Encrypt Files | Shell | Encrypt files with OpenSSL | |
| signify | Security | Verify OpenBSD software | |
| limits | Security | Setting resource limits | |
| File Permissions | Security | Fix insecure file permissions | Extend VPS 1 week |
| pledge | Security | Restrict system operations | |
| unveil | Security | Unveil parts of restricted filesystems | |
| setuid | Security | Audit setuid root binaries | |
| security? | Security | Security checks | |
| security | Security | Team security | |
| Routing | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Configure vlan | Network | Configure vlan | |
| pair? | Network | Configure pair interface | |
| Configure veb? | Network | Configure veb | |
| Configure bridge? | Network | Configure bridge | |
| Configure nat | Network | Configure NAT | |
| Static routing | Network | Configure static routing | |
| RIPd | Network | Configure RIPd | |
| route6d? | Network | Configure route6d | |
| OSPFd | Network | Configure OSPFd | |
| BGPd | Network | Configure BGPd | |
| Configure DHCP server | Network | ||
| DVMRPd? | Network | Configure DVMRPd | |
| mrouted? | Network | Configure Multicast Routing | |
| Configure npppd server? | Network | Configure npppd server | |
| Configure DHCP client? | Network | ||
| VPNs and Proxies | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Site-to-site IPsec | Security | Provide site-to-site IPsec VPN | |
| Site-to-site IPsec (vmm) | Security | Emulate site-to-site IPsec VPN with VMM | |
| Road warrior IPsec | Network | Provide Roadwarrior IPsec VPNs | |
| Road warrior IPsec (vmm) | Network | Emulate Roadwarrior IPsec VPNs | |
| VPN clients | Security | Configure IPsec VPN client | |
| Test VPN | Security | Test IP address behind VPN | |
| Binat IPsec | Network | Host home from with IPsec | |
| Secure Shell | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| sshd | Security | Configure and start sshd | |
| ssh fingerprints | Security | Verify SSH fingerprints | |
| ssh agent? | Security | Configure ssh agent | |
| OpenSSH | Security | Configure ssh and connect securely | |
| Generate SSH Keys | Security | Generate SSH keys | Extend VPS 1 week |
| SSH keys | Security | Verify ssh keys | |
| SSH backdoor | Security | Configure ssh side channel to avoid DDoS | |
| Chroot SFTP | Security | Configure sftp inside a chroot | |
| Chroot sshd | Network | Configure ssh users inside a chroot | |
| Chroot openrsync | Network | Configure openrsync inside a chroot | Extend VPS 1 week |
| Further Reading | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| OpenBSD Books | BSD | OpenBSD recommended reading | |
| Unix Books | BSD | Unix recommended reading | |
| Minutemin | |||
|---|---|---|---|
| Lesson | Topic | Description | Reward |
| Welcome to the Team | Civics | Learn Team Responsibilities | |
| Testing Servers | Civics | Learn Team Procedure for Testing | |
| Announcements | Civics | Announce downtime and updates for users | Extend VPS 1 week |