UNIX/Linux 系统管理技术手册（第4版）英文版（上、下册）

图书目录:

上册

SECTION ONE: BASIC ADMINISTRATION　1

第 一部分　基本管理技术

CHAPTER 1　WHERE TO START　3

第 1章　从何处入手

Essential duties of the system administrator / 系统管理员的基本任务　4

Account provisioning / 账号管理　4

Adding and removing hardware / 增删硬件　4

Performing backups / 执行备份　5

Installing and upgrading software / 安装和更新软件　5

Monitoring the system / 监视系统　5

Troubleshooting / 故障诊断　5

Maintaining local documentation / 维护本地文档　5

Vigilantly monitoring security / 时刻警惕系统安全　6

Fire fighting / 救火　6

Suggested background / 读者的知识背景　6

Friction between UNIX and Linux / UNIX和Linux之间的摩擦　7

Linux distributions / Linux的发行版本　9

Example systems used in this book / 本书使用的示例系统　10

Example Linux distributions / 用作示例的Linux发行版本　11

Example UNIX distributions / 用作示例的UNIX发行版本　12

System-specific administration tools / 特定于系统的管理工具　13

Notation and typographical conventions / 表示法和印刷约定　13

Units / 单位　14

Man pagesand other on-line documentation / 手册页和其他联机文档　16

Organization of the man pages / 手册页的组织　16

man: read man pages / man：读取手册页　17

Storage of man pages / 手册页的保存　17

GNU Texinfo / GNU Texinfo　18

Other authoritative documentation / 其他的权 威文档　18

System-specific guides / 针对系统的专门指南　18

Package-specific documentation / 针对软件包的专门文档　19

Books / 书籍　19

RFCs and other Internet documents / RFC和其他Internet文档　20

The Linux Documentation Project / LDP　20

Other sources of information / 其他的信息资源　20

Ways to find and install software / 查找和安装软件的途径　21

Determining whether software has already been installed /

判断软件是否已经安装　22

Adding new software / 增加新软件　23

Building software from source code / 从源代码编译软件　25

System administration under duress / 重压下的系统管理员　26

Recommended reading / 推荐读物　27

Exercises / 习题　28

CHAPTER 2　SCRIPTING AND THE SHELL　29

第 2章　脚本和shell

Shell basics / shell的基础知识　30

Command editing / 编辑命令　30

Pipes and redirection / 管道和重定向　31

Variables and quoting / 变量和引用　32

Common filter commands / 常见的过滤命令　33

bash scripting / bash脚本编程　37

From commands to scripts / 从命令到脚本　38

Input and output / 输入和输出　38

Command-line arguments and functions / 命令行参数和函数　40

Variable scope / 变量的作用域　42

Control flow / 控制流程　43

Loops / 循环　45

Arrays and arithmetic / 数组和算术运算　47

Regular expressions / 正则表达式　48

The matching process / 匹配过程　49

Literal characters / 普通字符　49

Special characters / 特殊字符　50

Example regular expressions / 正则表达式的例子　51

Captures / 捕获　52

Greediness, laziness, and catastrophic backtracking / 贪心、懒惰和

灾难性的回溯　53

Perl programming / Perl编程　54

Variables and arrays / 变量和数组　55

Array and string literals / 数组和字符串文字　56

Function calls / 函数调用　56

Type conversions in expressions / 表达式里的类型转换　57

String expansions and disambiguation of variable references / 字符串

表达式和变量　57

Hashes / 哈希　57

References and autovivification / 引用和自动生成　59

Regular expressions in Perl / Perl语言里的正则表达式　60

Input and output / 输入和输出　61

Control flow / 控制流程　61

Accepting and validating input / 接受和确认输入　63

Perl as a filter / Perl用作过滤器　64

Add-on modules for Perl / Perl的附加模块　65

Python scripting / Python脚本编程　66

Python quick start / Python快速入门　67

Objects, strings, numbers, lists, dictionaries, tuples, and files / 对象、

字符串、数、列表、字典、元组和文件　69

Input validation example / 确认输入的例子　70

Loops / 循环　71

Scripting best practices / 脚本编程的**佳实践　73

Recommended reading / 推荐读物　74

Shell basics and bash scripting / Shell基础知识和bash脚本编程　74

Regular expressions / 正则表达式　75

Perl scripting / Perl脚本编程　75

Python scripting / Python脚本编程　75

Exercises / 习题　76

CHAPTER 3　BOOTING AND SHUTTING DOWN　77

第3章　引导和关机

Bootstrapping / 引导　78

Recovery boot to a shell. / 恢复模式下引导进入shell　78

Steps in the boot process / 引导过程的步骤　78

Kernel initialization / 初始化内核　79

Hardware configuration / 配置硬件　79

Creation of kernel processes / 创建内核进程　79

Operator intervention (recovery mode only) / 操作员干预

（仅 限恢复模式）　80

Execution of startup scripts / 执行启动脚本　81

Boot process completion / 引导进程完成　81

Booting PCs / 引导PC　82

GRUB: The GRand Unified Boot loader. / GRUB：全面统一的引导加载程序　83

Kernel options / 内核选项　84

Multibooting / 多重引导　85

Booting to single-user mode. / 引导进入单用户模式　86

Single-user mode with GRUB / 用GRUB引导单用户模式　86

Single-user mode on SPARC / SPARC上的单用户模式　86

HP-UX single-user mode / HP-UX的单用户模式　87

AIX single-user mode / AIX的单用户模式　87

Working with startup scripts / 启动脚本　87

init and its run levels / init及其运行级　88

Overview of startup scripts / 启动脚本概述　89

Red Hat startup scripts. / Red Hat启动脚本　91

SUSE startup scripts. / SUSE的启动脚本　93

Ubuntu startup scripts and the Upstart daemon / Ubuntu的启动脚本和

Upstart守护进程　94

HP-UX startup scripts / HP-UX的启动脚本　95

AIX startup / AIX的启动　95

Booting Solaris / 引导Solaris　97

The Solaris Service Management Facility / Solaris的SMF　97

A brave new world: booting with SMF / 崭新的世界：用SMF引导系统　99

Rebooting and shutting down / 重新引导和关机　100

shutdown: the genteel way to halt the system / shutdown：停止系统的

妥善方式　100

halt and reboot: simpler ways to shut down / halt和reboot：关闭

系统的更简单方式　101

Exercises / 习题　102

CHAPTER 4　ACCESS CONTROL AND ROOTLY POWERS　103

第4章　访问控制和超级权限

Traditional UNIX access control / 传统的UNIX访问控制　104

Filesystem access control / 文件系统的访问控制　104

Process ownership / 进程的所有权　105

The root account / root账号　105

Setuid and setgid execution / setuid和setgid执行方式　106

Modern access control / 现代的访问控制　106

Role-based access control / 基于角色的访问控制　108

SELinux: security-enhanced Linux / SELinux：增强安全性的Linux　109

POSIX capabilities (Linux) / POSIX能力（Linux）　109

PAM: Pluggable Authentication Modules / PAM：可插入式身份验证模块　109

Kerberos: third-party cryptographic authentication / Kerberos：第三方

的加密验证　110

Access control lists / 访问控制列表　110

Real-world access control / 实际中的访问控制　110

Choosing a root password / 选择root的口令　111

Logging in to the root account / 登录进入root账号　112

su: substitute user identity / su：替换用户身份　113

sudo: limited su / sudo：受限的su　113

Password vaults and password escrow / 口令保险柜和口令代管　117

Pseudo-usersother than root / root之外的其他伪用户　118

Exercises / 习题　119

CHAPTER 5　CONTROLLING PROCESSES　120

第5章　进程控制

Components of a process / 进程的组成部分　120

PID: process ID number / PID：进程的ID号　121

PPID: parent PID / PPID：父PID　121

UID and EUID: real and effective user ID / UID和EUID：真实的和

有效的用户ID　122

GID and EGID: real and effective group ID / GID和EGID：真实

的和有效的组ID　122

Niceness / 谦让度　123

Control terminal / 控制终端　123

The life cycle of a process / 进程的生命周期　123

Signals / 信号　124

kill: send signals / kill: 发送信号　127

Process states / 进程的状态　128

nice and renice: influence scheduling priority / nice和renice：影响调度优先级　129

ps: monitor processes / ps：监视进程　130

Dynamic monitoring with top, prstat, and topas / 用top、prstat和topas动态

监视进程　133

The /proc filesystem. / /proc文件系统　135

strace, truss, and tusc: trace signals and system calls / strace、truss和tusc：追踪

信号和系统调用　136

Runaway processes / 失控进程　138

Recommended reading / 推荐读物　139

Exercises / 习题　139

CHAPTER 6　THE FILESYSTEM　140

第6章　文件系统

Pathnames / 路径名称　142

Absolute and relative paths / 绝 对路径和相对路径　142

Spaces in filenames / 文件名中的空白　142

Filesystem mounting and unmounting / 挂载和卸载文件系统　143

The organization of the file tree / 文件树的组织　145

File types / 文件类型　147

Regular files / 普通文件　149

Directories / 目录　149

Character and block device files / 字符设备文件和块设备文件　150

Local domain sockets / 本地域套接口　151

Named pipes / 有名管道　151

Symbolic links / 符号链接　151

File attributes / 文件属性　152

The permission bits / 权限位　152

The setuid and setgid bits / setuid和setgid位　153

The sticky bit / 粘附位　154

ls: list and inspect files / ls：列出和查看文件　154

chmod: change permissions / chmod：改变权限　156

chown and chgrp: change ownership and group / chown和chgrp：

改变归属关系和组　157

umask: assign default permissions. / umask：分配默认的权限　158

Linux bonus flags / Linux上的额外标志　158

Access control lists / 访问控制列表　159

A short and brutal history of UNIX ACLs / UNIX ACL简史　160

ACL implementation / ACL的实现　161

ACL support by system / 系统支持的ACL　162

POSIX ACLs / POSIX的ACL　162

NFSv4 ACLs / NFSv4的ACL　166

Exercises / 习题　173

CHAPTER 7　ADDING NEW USERS　174

第7章　添加新用户

The /etc/passwd file / /etc/passwd文件　176

Login name / 登录名　176

Encrypted password / 加密的口令　179

UID (user ID) number / UID号　180

Default GID number / 默认的GID号　181

GECOS field / GECOS字段　181

Home directory / 主目录　182

Login shell / 登录shell　182

The /etc/shadow and /etc/security/passwd files / /etc/shadow和/etc/security/

passwd文件　183

The /etc/group file / /etc/group文件　186

Adding users: the basic steps / 添加用户：基本步骤　187

Editing the passwd and group files / 编辑passwd和group文件　188

Setting a password / 设置口令　188

Creating the home directory and installing startup files / 创建主

目录并安装启动文件　189

Setting permissions and ownerships / 设置权限和所属关系　190

Setting a mail home / 设置邮件主目录　190

Configuring roles and administrative privileges / 配置角色和管理特权　190

Final steps / 收尾步骤　191

Adding users with useradd / 用useradd添加用户　191

useradd on Ubuntu / Ubuntu上的useradd　192

useradd on SUSE / SUSE上的useradd　193

useradd on Red Hat / Red Hat上的useradd　193

useradd on Solaris / Solaris上的useradd　194

useradd on HP-UX / HP-UX上的useradd　194

useradd on AIX / AIX的useradd　195

useradd example. / useradd举例　197

Adding users in bulk with newusers (Linux) / 用newusers成批

添加用户（Linux）　197

Removing users / 删除用户　198

Disabling logins. / 禁止登录　200

Managing users with system-specific tools / 用系统的专门工具管理用户　201

Reducing risk with PAM. / 用PAM降低风险　201

Centralizing account management / 集中管理账号　201

LDAP and Active Directory / LDAP和Active Directory　202

Single sign-on systems / 单一登录系统　202

Identity management systems / 身份管理系统　203

Recommended reading / 推荐读物　204

Exercises / 习题　205

CHAPTER 8　STORAGE　206

第8章　存储

I just want to add a disk! / 只想加一块硬盘！　207

Linux recipe / Linux的做法　207

Solaris recipe / Solaris的做法　208

HP-UX recipe / HP-UX的做法　208

AIX recipe / AIX的做法　209

Storage hardware / 存储硬件　209

Hard disks / 硬盘　210

Solid state disks / 固态盘　212

Storage hardware interfaces / 存储硬件接口　213

The PATA interface / PATA接口　215

The SATA interface / SATA接口　215

Parallel SCSI / 并行SCSI　216

Serial SCSI / 串行SCSI　219

Which is better, SCSI or SATA / SCSI和SATA的比较　219

Peeling the onion: the software side of storage / 层层剖析：存储上的软件　220

Attachment and low-level management of drives / 硬盘的安装和底层管理　223

Installation verification at the hardware level / 在硬件层面上的安装核实　223

Disk device files / 磁盘设备文件　224

Formatting and bad block management / 格式化和坏块管理　226

ATA secure erase / ATA安全擦除　227

hdparm: set disk and interface parameters (Linux) / hdparm：设置

磁盘和接口参数（Linux）　229

Hard disk monitoring with SMART / 使用SMART监视磁盘　230

Disk partitioning. / 磁盘分区　231

Traditional partitioning / 传统的分区方式　233

Windows-style partitioning / Windows的分区　234

GPT:GUID partition tables / GPT：GUID分区表　235

Linux partitioning / Linux的分区　236

Solaris partitioning / Solaris的分区　236

HP-UX partitioning / HP-UX的分区　237

RAID: redundant arrays of inexpensive disks / RAID：廉价磁盘冗余阵列　237

Software vs. hardware RAID / 软硬RAID对比　237

RAID levels / RAID的级别　238

Disk failure recovery / 硬盘故障恢复　241

Drawbacks of RAID 5 / RAID 5的缺点　241

mdadm: Linux software RAID / mdadm：Linux上的软RAID　242

Logical volume management / 逻辑卷管理　246

LVM implementations / LVM的实现　246

Linux logical volume management / Linux的逻辑卷管理　247

HP-UX logical volume management / HP-UX的逻辑卷管理　251

AIX logical volume management / AIX的逻辑卷管理　253

Filesystems. / 文件系统　254

Linux filesystems: the ext family / Linux文件系统：ext家族的

文件系统　255

HP-UX filesystems: VxFS and HFS / HP-UX文件系统　256

AIX’s JFS2 / AIX的JFS2文件系统　257

Filesystem terminology / 文件系统的术语　257

Filesystem polymorphism / 文件系统的多态性　258

mkfs: format filesystems / mkfs：格式化文件系统　258

fsck: check and repair filesystems / fsck：检查和修复文件系统　259

Filesystem mounting / 挂载文件系统　260

Setup for automatic mounting / 设置自动挂载　260

USB drive mounting / 挂载USB设备　263

Enabling swapping / 启用交换分区　264

ZFS: all your storage problems solved. / ZFS：解决所有存储问题　264

ZFS architecture / ZFS体系结构　265

Example: Solaris disk addition / 举例：Solaris磁盘分区　266

Filesystems and properties / 文件系统和属性　266

Property inheritance / 属性继承　268

One filesystem per user / 每个用户一个文件系统　269

Snapshots and clones / 快照和克隆　269

Raw volumes / 原始卷　271

Filesystem sharing filesystem through NFS, CIFS, and iSCSI /

通过NFS、CIFS和iSCSI共享文件系统　271

Storage pool management / 存储池管理　272

Storage area networking / 存储区域网络　274

SAN networks / SAN网络　275

iSCSI: SCSI over IP / iSCSI：SCSI over IP　276

Booting from an iSCSI volume / 从iSCSI卷引导　277

Vendor specifics for iSCSI initiators / iSCSI的厂商特性　277

Exercises / 习题　281

CHAPTER 9　PERIODIC PROCESSES　283

第9章　周期性进程

cron: schedule commands / cron:按时间表执行命令　283

The format of crontab files / crontab文件的格式　284

Crontab management / crontab管理　286

Linux and Vixie-cron extensions / Linux及其Vixie-CRON的扩展　287

Some common uses for cron / cron的常见用途　288

Simple reminders / 简单的提醒功能　288

Filesystem cleanup / 清理文件系统　289

Network distribution of configuration files / 配置文件的网络分布　290

Log file rotation / 循环日志文件　290

Exercises / 习题　291

CHAPTER 10　BACKUPS　292

第 10章　备份

Motherhood and apple pie / 备份基本原理　293

Perform all backups from a central location / 从中心位置执行

所有的备份　293

Label your media / 给备份介质加卷标　293

Pick a reasonable backup interval / 选择合理的备份间隔　294

Choose filesystems carefully / 仔细选择文件系统　294

Make daily dumps fit onone piece of media / 在单一介质上做日常转储　294

Keep media off-site / 异地保存介质　295

Protect your backups / 保护备份　295

Limit activity during backups / 备份期间限制活动　296

Verify your media / 查验介质　297

Develop a media life cycle / 发掘介质的寿命　297

Design your data for backups / 为备份而设计数据　298

Prepare for the worst / 做**坏的准备　298

Backup devices and media / 备份设备和介质　299

Optical media: CD-R/RW, DVD±R/RW, DVD-RAM, and Blu-ray /

光盘：CD-R/RW、DVD±R/RW、DVD-RAM和蓝光　299

Portable and removable hard disks / 便携和移动硬盘　300

Magnetic tapes in general / 磁带概述　301

Small tape drives: 8mm and DDS/DAT / 小型磁带机：8mm

磁带和DDS/DAT　301

DLT/S-DLT / DLT和S-DLT　301

AIT and SAIT / AIT和SAIT　302

VXA/VXA-X / VXA和VXA-X　302

LTO / LTO　302

Jukeboxes, stackers, and tape libraries / 自动选带机、自动换带机以及

磁带库　302

Hard disks / 硬盘　303

Internet and cloud backup services / 因特网和云备份服务　303

Summary of media types / 介质类型小结　304

What to buy / 设备选型　304

Saving space and time with incremental backups / 节省空间和时间与增量备份　305

A simple schedule / 简单的计划　306

A moderate schedule / 适中的计划　307

Setting up a backup regime with dump / 用dump建立备份机制　307

Dumping filesystems / 转储文件系统　308

Restoring from dumps with restore / 用restore从转储中恢复　310

Restoring entire filesystems / 恢复整个文件系统　313

Restoring to new hardware / 恢复到新硬盘上　314

Dumping and restoring for upgrades / 为系统升级而执行转储和恢复　314

Using other archiving programs / 使用其他存档程序　315

tar: package files / tar: 给文件打包　315

dd: twiddle bits / dd：处理位流　316

ZFS backups / ZFS的备份　316

Using multiple files on a single tape / 使用同一卷磁带上的多个文件　317

Bacula / Bacula　318

The Bacula model / Bacula的模型　319

Setting up Bacula / 设置Bacula　320

Installing the database and Bacula daemons / 安装数据库和Bacula的

守护进程　320

Configuring the Bacula daemons / 配置Bacula的守护进程　321

Common configuration sections / 公共的配置段　322

bacula-dir.conf: director configuration / bacular-dir.conf：配置控制文件　324

bacula-sd.conf: storage daemon configuration / bacula-sd.conf：

配置存储守护进程　327

bconsole.conf: console configuration / bconsole.conf：配置控制台　328

Installing and configuring the client file daemon / 安装和配置

客户端的文件守护进程　328

Starting the Bacula daemons / 启动Bacula的守护进程　329

Adding media to pools / 向存储池添加介质　329

Running a manual backup / 执行一次手工备份　330

Running a restore job / 执行一次恢复工作　330

Backing up Windows clients / 给Windows客户机做备份　333

Monitoring Bacula configurations / 监视和调试Bacula的配置　334

Bacula tips and tricks / Bacula的技巧和窍门　334

Alternatives to Bacula / Bacula的替代工具　335

Commercial backup products / 商用备份产品　335

ADSM/TSM / ADSM/TSM　336

Veritas NetBackup / VeritasNetBackup　336

EMC NetWorker / EMCNetWorker　337

Other alternatives / 其他选择　337

Recommended reading / 推荐读物　337

Exercises / 习题　337

CHAPTER 11　SYSLOG AND LOG FILES　340

第 11章　系统日志与日志文件

Finding log files / 日志文件的位置　341

Files not to manage / 不用管理的文件　342

Vendor specifics / 厂商特有的文件　344

Syslog: the system event logger / syslog：系统事件的日志程序　344

Syslog architecture / syslog的体系结构　345

Configuring syslogd / 配置syslogd　345

Config file examples / 配置文件举例　349

Syslog debugging / 调试syslog　351

Alternatives to syslog / syslog的其他替代方案　351

Linux kernel and boot-time logging / Linux内核和引导时刻日志　352

AIX logging and error handling / 1AIX：日志记录和出错处理　353

Syslog configuration under AIX / AIX的syslog配置　355

logrotate: manage log files / logrotate: 管理日志文件　356

Condensing log files to useful information / 分析日志文件　358

Logging policies / 日志记录的策略　359

Exercises / 习题　361

CHAPTER 12　SOFTWARE INSTALLATION AND MANAGEMENT　362

第 12章　软件安装和管理

Installing Linux and OpenSolaris / 安装Linux和OpenSolaris　363

Netbooting PCs / 从网络引导PC　363

Setting up PXE for Linux / 为Linux设置PXE　364

Netbooting non-PCs / 非PC的网络引导　364

Using Kickstart: the automated installer for Red Hat Enterprise Linux /

Kickstart：RHEL的自动安装程序　365

Using AutoYaST: SUSE’s automated installation tool / AutoYaST：

SUSE的自动安装工具　367

Automating installation with the Ubuntu installer / 用Ubuntu的

安装程序自动安装　368

Installing Solaris / 安装Solaris　370

Network installations with JumpStart / 使用JumpStart网络安装　371

Network installations with the Automated Installer / 使用自动安装

程序进行网络安装　375

Installing HP-UX / 安装HP-UX　377

Automating Ignite-UX installations / 用Ignite-UX自动安装　379

Installing AIX with the Network Installation Manager / 使用NIM安装AIX　380

Managing packages / 软件包管理　381

Managing Linux packages / Linux的高 级软件包管理系统　382

rpm: manage RPM packages. / rpm：管理RPM软件包　382

dpkg: manage. deb packages in Ubuntu / dpkg：管理Debian的软件包　383

Using high-level Linux package management systems / Linux的高 级软件

包管理系统　384

Package repositories / 软件包的库　385

RHN: the Red Hat Network / RHN：Red Hat网络　387

APT:the Advanced Package Tool / APT：高 级软件包工具　387

apt-get configuration / 配置apt-get　388

An example /etc/apt/sources.list file / /etc/apt/sources.list文件的例子　389

Creation of a local repository mirror / 创建本地的库镜像　390

apt-get automation / 自动执行apt-get　391

yum: release management for RPM / yum：管理RPM的发布　391

Zypper package management for SUSE: now with more ZYpp! /

Zypper：SUSE的软件包管理　392

Managing packages for UNIX / UNIX的软件包管理　393

Solaris packaging / Solaris软件包　394

HP-UX packaging / HP-UX软件包　394

Software management in AIX / AIX的软件管理　396

Revision control / 版本控制　397

Backup file creation / 创建备份文件　397

Formal revision control systems / 正规的版本控制系统　398

Subversion / Subversion　399

Git / Git　401

Software localization and configuration / 软件的本地化和配置　404

Organizing your localization. / 本地化的组织　405

Testing / 测试　406

Compiling locally / 本地编译软件　407

Distributing localizations / 发布本地软件　408

Using configuration management tools / 配置管理工具　408

cfengine: computer immune system / cfengine：计算机免疫系统　408

LCFG: a large-scale configuration system / LCFG：大规模配置系统　409

Template Tree 2: cfengine helper / Template Tree 2：cfengine的帮手　410

DMTF/CIM:the Common Information Model / DMTF/CIM：公共

信息模型　410

Sharing software over NFS / 通过NFS共享软件　411

Package namespaces / 软件包的名字空间　411

Dependency management / 依赖关系的管理　412

Wrapper scripts / 封装脚本　413

Recommended reading / 推荐读物　413

Exercises / 习题　414

CHAPTER 13　DRIVERS AND THE KERNEL　415

第 13章　驱动程序和内核

Kernel adaptation / 内核的适应性　416

Drivers and device files / 驱动程序和设备文件　417

Device files and device numbers / 设备文件和设备号　418

Device file creation / 创建设备文件　419

Naming conventions for devices / 设备的命名约定　420

Custom kernels versus loadable modules / 自定义内核和可加载模块　420

Linux kernel configuration / 配置Linux内核　421

Tuning Linux kernel parameters / 调整Linux内核参数　421

Building a Linux kernel / 构造Linux内核　423

If it ain’t broke, don’t fix it / 内核没问题就不要改它　423

Configuring kernel options / 配置内核选项　423

Building the kernel binary / 构建Linux内核的二进制文件　425

Adding a Linux device driver / 添加Linux设备驱动程序　425

Solaris kernel configuration / 配置Solaris内核　427

The Solaris kernel area / Solaris内核区　427

Configuring the kernel with /etc/system / 用/etc/system配置内核　428

Adding a Solaris device driver / 添加一个Solaris设备驱动程序　430

Debugging a Solaris configuration / 调试Solaris的配置　430

HP-UX kernel configuration / 配置HP-UX内核　431

Management of the AIX kernel / 管理AIX内核　432

The Object Data Manager / ODM　432

Kernel tuning / 内核调配　434

Loadable kernel modules / 可加载内核模块　434

Loadable kernel modules in Linux / Linux的可加载内核模块　435

Loadable kernel modules in Solaris / Solaris的可加载内核模块　436

Linux udev for fun and profit / 1Linux udev的意义和作用　437

Linux sysfs: a window into the souls of devices / Linux sysfs：

设备对外的窗口　438

Exploring devices with udevadm / 用udevadm浏览设备　439

Constructing rules and persistent names / 构造规则和固定不变的名字　439

Recommended reading / 推荐读物　443

Exercises / 习题　444

SECTION TWO: NETWORKING 　

第 二部分　网络管理技术

CHAPTER 14　TCP/IP NETWORKING　447

第 14章　TCP/IP网络

TCP/IP and its relationship to the Internet / TCP/IP和Internet　447

Who runs the Internet / Internet的运行管理　448

Network standards and documentation / 网络的标准和文献　449

Networking road map / 连网技术概述　450

IPv4 and IPv6 / IPv4和IPv6　451

Packets and encapsulation / 分组和封装　452

Ethernet framing / 以太网组帧　453

Maximum transfer unit / **大传输单位（MTU）　453

Packet addressing / 分组地址　454

Hardware (MAC) addressing / 硬件（MAC）地址　454

IP addressing / IP地址　455

Hostname “addressing” / 主机名“地址”　456

Ports / 端口　456

Address types / 地址类型　456

IP addresses: the gory details / IP地址详解　457

IPv4 address classes / IPv4地址分类　457

Subnetting / 子网　458

Tricks and tools for subnet arithmetic / 计算子网的技巧和工具　459

CIDR: Classless Inter-Domain Routing / CIDR：无类域间路由　460

Address allocation / 地址分配　461

Private addresses and network address translation (NAT) / 私用

地址和NAT　462

IPv6 addressing / IPv6地址　464

Routing / 路由选择　465

Routing tables / 路由表　466

ICMP redirects / CMP重定向　467

ARP: the Address Resolution Protocol / ARP：地址解析协议　468

DHCP: the Dynamic Host Configuration Protocol / DHCP：动态主机配置协议　469

DHCP software / DHCP软件　470

How DHCP works / DHCP的工作方式　470

ISC’s DHCP software / ISC的DHCP服务器　471

Security issues / 安全问题　472

IP forwarding / IP转发　472

ICMP redirects / ICMP重定向　473

Source routing / 源路由　473

Broadcast pings and other directed broadcasts / 广播ping和其他

形式的定向广播　473

IP spoofing / IP欺骗　473

Host-based firewalls / 基于主机的防火墙　474

Virtual private networks / 虚拟私用网络　475

PPP: the Point-to-Point Protocol / PPP：点对点协议　476

Basic network configuration / 基本的网络配置　476

Hostname and IP address assignment / 分配主机名和IP地址　477

ifconfig: configure network interfaces / ifconfig：配置网络接口　478

Network hardware options / 网络硬件参数　481

route: configure static routes / route：配置静态路由　481

DNS configuration / 配置DNS　483

System-specific network configuration / 特定于系统的网络配置　484

Linux networking / Linux连网　484

NetworkManager / NetworkManager　485

Ubuntu network configuration / Debian和Ubuntu的网络配置　486

SUSE network configuration / SUSE的网络配置　486

Red Hat network configuration / Red Hat的网络配置　487

Linux network hardware options / Linux的网络硬件配置选项　489

Linux TCP/IP options / Linux的TCP/IP配置选项　490

Security-related kernel variables / 有关安全的内核变量　492

Linux NAT and packet filtering / Linux的NAT和包过滤　493

Solaris networking / Solaris连网　494

Solaris basic network configuration / 基本网络配置　494

Solaris configuration examples / 网络配置举例　496

Solaris DHCP configuration / DHCP的配置　497

ndd: TCP/IP and interface tuning for Solaris / ndd：调整TCP/IP和接口　498

Solaris security / 安全　499

Solaris firewalls and filtering / 防火墙和过滤机制　499

Solaris NAT / NAT　500

Solaris networking quirks / Solaris连网的特别之处　501

HP-UX networking / HP-UX连网　501

Basic network configuration for HP-UX / 基本网络配置　501

HP-UX configuration examples / 网络配置举例　502

HP-UX DHCP configuration / DHCP的配置　504

HP-UX dynamic reconfiguration and tuning / 动态的重新配置和调整　504

HP-UX security, firewalls, filtering, and NAT / 安全、防火墙、

过滤和NAT　505

AIX networking / AIX连网　506

no: manage AIX network tuning parameters / no：管理AIX的网络

可配参数　507

Recommended reading / 推荐读物　508

Exercises / 习题　509

CHAPTER 15　ROUTING　511

第 15章　路由选择

Packet forwarding: a closer look / 近观包转发　512

Routing daemons and routing protocols / 路由守护进程和路由协议　515

Distance-vector protocols / 距离向量协议　515

Link-state protocols / 链路状态协议　516

Cost metrics / 代价度量　517

Interior and exterior protocols / 内部协议和外部协议　517

Protocols on parade / 路由协议巡礼　518

RIP and RIPng: Routing Information Protocol / RIP和RIPng：路由

信息协议　518

OSPF: Open Shortest Path First / OSPF：开放**短路径优先　519

EIGRP: Enhanced Interior Gateway Routing Protocol / EIGRP：增强

内部网关路由协议　519

IS-IS: the ISO “standard” / IS-IS：ISO的“标准”　520

Router Discovery Protocol and Neighbor Discovery Protocol /

RDP和NDP　520

BGP: the Border Gateway Protocol / BGP：边界网关协议　520

Routing strategy selection criteria / 路由策略的选择标准　521

Routing daemons / 路由守护进程　522

routed: obsolete RIP implementation / routed：过时的RIP实现　522

gated: first-generation multiprotocol routing daemon / gated：第 一代的

多协议路由守护进程　523

Quagga: mainstream routing daemon / Quagga：主流的路由守护进程　523

ramd: multiprotocol routing system for HP-UX / ramd：HP-UX的

多协议路由系统　524

XORP: router in a box / XORP：计算机里的路由器　524

Vendor specifics / 各操作系统的特性　525

Cisco routers / 思科路由器　525

Recommended reading / 推荐读物　528

Exercises / 习题　530

CHAPTER 16　NETWORK HARDWARE　531

第 16章　网络硬件

Ethernet: the Swiss Army knife of networking / 以太网：连网技术中的瑞士军刀　532

How Ethernet works / 以太网的工作方式　532

Ethernet topology / 以太网拓扑结构　533

Unshielded twisted pair cabling / 无屏蔽双绞线　534

Optical fiber / 光纤　536

Connecting and expanding Ethernets / 连接和扩展以太网　537

Autonegotiation / 自动协商　539

Power over Ethernet / 以太网供电　540

Jumbo frames / 巨大帧　541

Wireless: ethernet for nomads / 无线：流动人士的LAN　541

Wireless security / 无线网络的安全　543

Wireless switches and lightweight access points / 无线交换机和

轻量级AP　543

DSL and cable modems: the last mile / DSL和CM：**后一英里　543

Network testing and debugging / 网络测试和调试　544

Building wiring / 建筑物布线　545

UTP cabling options / UTP电缆的选择　545

Connections to offices / 到办公室的连接　546

Wiring standards / 布线标准　546

Network design issues / 网络设计问题　547

Network architecture vs. building architecture / 网络结构与建筑物结构　547

Expansion / 扩展　548

Congestion / 拥塞　548

Maintenance and documentation / 维护和建档　549

Management issues / 管理问题　549

Recommended vendors / 推荐的厂商　550

Cables and connectors / 电缆和连接器　550

Test equipment / 测试仪器　550

Routers/switches / 路由器/交换机　550

Recommended reading / 推荐读物　550

Exercises / 习题　551

下册

目录

CHAPTER 17　DNS: THE DOMAIN NAME SYSTEM　552

第 17章　DNS：域名系统

Who needs DNS / 谁需要DNS　554

Managing your DNS / 管理DNS　554

How DNS works / 1DNS的工作原理　555

Resource records / 资源记录　555

Delegation / 授权　555

Caching and efficiency / 缓存和效率　556

Multiple answers / 多重响应　557

DNS for the impatient / DNS速成　558

Adding a new machine to DNS / 向DNS添加新机器　558

Configuring a DNS client / 配置DNS客户机　561

Name servers / 域名服务器　563

Authoritative and caching-only servers / 权 威与仅缓存服务器　563

Recursive and nonrecursive servers / 递归和非递归服务器　565

The DNS namespace / DNS名字空间　566

Registering a second-level domain name / 注册二级域名　567

Creating your own subdomains / 创建子域　567

Designing your DNS environment / 设计DNS环境　568

Namespace management / 名字空间管理　568

Authoritative servers / 权 威服务器　569

Caching servers / 缓存服务器　569

Hardware requirements / 硬件要求　570

Security / 安全　571

Summing up / 总结　571

What’s new in DNS / DNS的新特性　572

The DNS database / DNS数据库　574

Commands in zone files / 区文件中的命令　574

Resource records / 资源记录　576

The SOA record / SOA记录　579

NS records / NS记录　581

A records / A记录　582

PTR records / PTR记录　582

MX records / MX记录　583

CNAME records / CNAME记录　585

The CNAME hack / 巧用CNAME　585

SRV records / SRV记录　587

TXT records / TXT记录　588

IPv6 resource records / IPv6资源记录　589

SPF records / SPF记录　590

DKIM and ADSP records / DKIM和ADSP记录　591

SSHFP resource records / SSHFP资源记录　594

DNSSEC resource records / DNSSEC资源记录　595

Glue records: links between zones / 粘合记录：区之间的链接　596

The BIND software / BIND软件　597

Version determination / 判定版本　598

Components of BIND / BIND的组成　600

Configuration files / 配置文件　600

The include statement / include语句　602

The options statement / options语句　602

The acl statement / acl语句　609

The (TSIG) key statement / （TSIG）key语句　609

The trusted-keys statement / trusted-keys语句　610

The server statement / server语句　610

The masters statement / masters语句　611

The logging statement / logging语句　612

The statistics-channels statement / statistics-channels语句　612

The zone statement / zone语句　612

The controls statement for rndc / rndc的controls语句　615

Split DNS and the view statement / 分离式DNS和view语句　617

BIND configuration examples / BIND配置举例　618

The localhost zone / localhost区　619

A small security company / 一家小型的安全公司　620

The Internet Systems Consortium, isc.org / ISC　623

The NSD/Unbound software / NSD/Unbound软件　625

Installing and configuring NSD / 安装和配置NSD　625

Running nsd / 运行nsd　632

Installing and configuring Unbound / 安装和配置Unbound　632

Updating zone files / 更新区文件　638

Zone transfers / 区传送　639

BIND dynamic updates / BIND的动态更新　640

Security issues / 安全问题　642

Access control lists in BIND, revisited / 再谈BIND访问控制列表　643

Open resolvers / 开放的解析器　644

Running in a chrooted jail / 在监管环境下运行　645

Secure server-to-server communication with TSIG and TKEY /

使用TSIG和TKEY保障服务器与服务器之间通信的安全　645

Setting up TSIG for BIND / 为BIND设置TSIG　646

TSIG in NSD / NSD里的TSIG　648

DNSSEC / DNSSEC　648

DNSSEC policy / DNSSEC策略　652

DNSSEC resource records / DNSSEC资源记录　653

Turning on DNSSEC / 启用DNSSEC　654

Key pair generation / 生成密钥对　655

Zone signing / 区签名　657

The DNSSEC chain of trust / DNSSEC信任链　660

DLV: domain lookaside validation / DLV：域旁路认证　661

DNSSEC key rollover / DNSSEC密钥延期　662

DNSSEC tools / DNSSEC工具　663

Debugging DNSSEC / 调试DNSSEC　665

Microsoft and DNS / 微软和DNS　667

Testing and debugging / 测试和调试　667

Logging in BIND / BIND的日志功能　667

Logging in NSD/Unbound / NSD/Unbound的日志功能　673

Name server control programs / 域名服务器的控制程序　674

Name server statistics / 域名服务器统计　676

Debugging with dig / 用dig进行调试　677

Lame delegations / 残缺授权　678

DNS sanity checking tools / 其他DNS检查工具　679

Performance issues / 性能问题　680

Vendor specifics / 各操作系统的特定信息　681

Specifics for Linux / Linux　681

Specifics for Solaris / Solaris　684

Specifics for HP-UX / HP-UX　684

Specifics for AIX / AIX　685

Recommended reading / 推荐读物　686

Mailing lists and newsgroups / 邮递列表和新闻组　686

Books and other documentation / 书籍和其他文档　687

On-line resources / 网上资源　688

The RFCs / RFC　688

Exercises / 习题　688

CHAPTER 18 THE NETWORK FILE SYSTEM　690

第 18章　网络文件系统

Introduction to network file services / NFS概述　690

Issues of state / 状态问题　691

Performance concerns / 性能问题　691

Security / 安全　691

The NFS approach / NFS的方法　692

Protocol versions and history / NFS协议的版本和历史　692

Transport protocols / 传输协议　693

State / 状态　693

File system exports / 文件系统导出　693

File locking / 文件上锁机制　694

Security concerns / 安全问题　695

Identity mapping in version 4 / NFSv4的标识映射　696

Root access and the nobody account / root访问与nobody账号　697

Performance considerations in version 4 / NFSv4的性能考虑　698

Disk quotas / 磁盘配额　698

Server-side NFS / 服务器端NFS　698

The share command and dfstab file(Solaris, HP-UX) / share命令和

dfstab文件（Solaris/HP-UX）　700

The exportfs command and the exports file(Linux, AIX) / exportfs

命令和exports文件（Linux/AIX）　702

Exports in AIX / 在AIX上导出文件系统　702

Exports in Linux / 在Linux上导出文件系统　703

nfsd: serve files / nfsd：提供文件服务　705

Client-side NFS / 客户端NFS　706

Mounting remote filesystems at boot time / 在启动时挂载远程

文件系统　708

Restricting exports to privileged ports / 端口安全限制　709

Identity mapping for NFS version 4 / NFSv4的标识映射　709

nfsstat: dump NFS statistics / 1nfsstat：转储NFS统计信息　710

Dedicated NFS file servers / 专用NFS文件服务器　711

Automatic mounting / 自动挂载　711

Indirect maps / 间接映射文件　713

Direct maps / 直接映射文件　713

Master maps / 主控映射文件　714

Executable maps / 可执行的映射文件　714

Automount visibility / 自动挂载的可见性　715

Replicated filesystems and automount / 重复的文件系统和自动挂载　715

Automatic automounts (V3; all but Linux) / 自动的automount

（除Linux之外其他系统上的NFSv3）　716

Specifics for Linux / Linux的特定信息　717

Recommended reading / 推荐读物　717

Exercises / 习题　718

CHAPTER 19　SHARING SYSTEM FILES　719

第 19章　共享系统文件

What to share / 共享什么　720

Copying files around / 把文件复制到各处　721

The NFS option / NFS的选项　721

Push systems vs. pull systems / “推”系统和“拉”系统　722

rdist: push files / rdist：推文件　722

rsync: transfer files more securely / rsync：更安全地传输文件　725

Pulling files / 拉文件　727

LDAP: the Lightweight Directory Access Protocol / LDAP：轻量级目录

访问协议　728

The structure of LDAP data / LDAP数据的结构　728

The point of LDAP / LDAP的特点　730

LDAP documentation and specifications / LDAP的文档和规范　731

OpenLDAP: the traditional open source LDAP server / OpenLDAP：

传统的开源LDAP　731

389 Directory Server: alternative open source LDAP server /

389 Directory Server：另一种开源LDAP服务器　732

LDAP instead of /etc/passwd and /etc/group / 用LDAP代替/etc/

passwd和/etc/group　733

LDAP querying / LDAP查询　734

LDAP and security / LDAP和安全　735

NIS: the Network Information Service / NIS：网络信息服务　736

The NIS model / NIS模型　736

Understanding how NIS works / 理解NIS的工作方式　736

NIS security / NIS的安全　738

Prioritizing sources of administrative information / 确定管理信息源的优先级　739

nscd: cache the results of lookups / nscd：缓存查找的结果　740

Recommended reading / 推荐读物　741

Exercises / 习题　741

CHAPTER 20　ELECTRONIC MAIL　742

第 20章　电子邮件

Mail systems / 邮件系统　744

User agents / 用户代理　744

Submission agents / 提交代理　745

Transport agents / 传输代理　746

Local delivery agents / 本地投递代理　746

Message stores / 消息库　746

Access agents / 访问代理　747

So many pieces, so little time / 内容太多，时间太少　747

The anatomy of a mail message / 剖析邮件消息　748

Reading mail headers / 阅读邮件信头　748

The SMTP protocol / SMTP协议　750

You had me at EHLO / EHLO　751

SMTP error codes / SMTP出错代码　751

SMTP authentication / SMTP身份验证　752

Mail system design / 邮件系统的设计　753

Using mail servers / 使用邮件服务器　754

Mail aliases. / 邮件别名　756

Getting aliases from files / 从文件中获取别名　758

Mailing to files / 发邮件给文件　759

Mailing to programs / 发邮件给程序　759

Aliasing by example / 别名举例　760

Building the hashed alias database / 散列的别名数据库　760

Using mailing lists and list wrangling software / 邮递列表和实现

清单的软件　760

Software packages for maintaining mailing lists / 维护邮递列表的

软件包　761

Content scanning: spam and malware / 内容扫描：垃圾邮件和恶意软件　761

Spam / 垃圾邮件　762

Forgeries / 伪造邮件　763

Message privacy / 消息隐私　763

Spam filtering / 垃圾邮件过滤　764

When to filter / 何时过滤　764

Greylisting/DCC / 灰名单技术/DCC　765

SpamAssassin / SpamAssassin　765

Blacklists / 黑名单　766

Whitelists / 白名单　766

Miltering: mail filtering / 邮件过滤库　767

SPF and Sender ID / SPF和Sender ID　767

DomainKeys, DKIM, and ADSP / DomainKeys、DKIM和ADSP　768

MTA-specific antispam features / MTA特有的反垃圾邮件功能　768

MailScanner / MailScanner　769

amavisd-new / amavisd-new　769

Tests of your MTA’s scanning effectiveness / 测试MTA的扫描效力　773

Email configuration / 电子邮件配置　774

Sendmail / sendmail　775

The switch file / 开关文件　776

Starting sendmail / 运行模式　776

Mail queues / 邮件队列　778

sendmail configuration / 配置sendmail　778

The m4 preprocessor / m4预处理器　779

The sendmail configuration pieces / sendmail的配置　779

A configuration file built from a sample. mc file / 从.mc样板文件构

建配置文件　781

sendmail configuration primitives / sendmail基本配置原语　782

Tables and databases / 表和数据库　782

Generic macros and features / 通用宏和功能　783

Client configuration / 客户端选项　788

Configuration options / 配置选项　789

Spam-related features in sendmail / sendmail中处理垃圾邮件的功能　789

Milter configuration in sendmail / sendmail中的milter配置　794

amavisd and sendmail connection / amavisd和sendmail的连接　794

Security and sendmail / 安全与sendmail　795

Ownerships / 所有权　796

Permissions / 权限　797

Safer mail to files and programs / 向文件和程序更安全地发邮件　798

Privacy options / 隐私选项　799

Running a chrooted sendmail (for the truly paranoid) / 运行一个

chroot过的sendmail（真正严格的要求）　800

Denial of service attacks / 拒绝服务攻击　800

SASL: the Simple Authentication and Security Layer / SASL：简单的

身份验证和安全层　801

TLS: Transport Layer Security / TLS：传输层安全　801

sendmail performance / sendmail的性能　802

Delivery modes / 投递方式　802

Queue groups and envelope splitting / 队列分组和信封分割　802

Queue runners / 队列运行器　802

Load average controls / 控制平均负载　803

Undeliverable messages in the queue / 队列中无法投递的消息　803

Kernel tuning / 内核调优　804

sendmail testing and debugging / sendmail测试和调试　805

Queue monitoring / 队列监视　806

Logging / 日志机制　806

Exim / Exim　807

Exim installation / 安装Exim　808

Exim startup / Exim的启动脚本　810

Exim utilities / Exim的工具　811

Exim configuration language / Exim的配置语言　811

Exim configuration file / Exim的配置文件　812

Global options / 全局的配置选项　813

ACLs (access control lists) / ACL　815

Content scanning at ACL time / ACL内容扫描　818

Authenticators / 身份验证器　820

Routers / 路由　821

Transports / 传输　824

Retry configuration / 重试配置　825

Rewriting configuration / 重写配置　825

Local scan function / 本地扫描功能　825

amavisd and Exim connection / amavisd和Exim的连接　826

Logging / 日志机制　826

Debugging / 调试机制　827

Postfix / Postfix邮件系统　828

Postfix architecture / Postfix的体系结构　828

Security / 安全　830

Postfix commands and documentation / Postfix命令和文档　830

Postfix configuration / 配置Postfix　831

Virtual domains / 虚拟域　835

Access control / 访问控制　837

Fighting spam and viruses / 反垃圾邮件和病毒　840

Content filtering with amavisd / 用amavisd做内容过滤　842

Debugging / 调试　844

DKIM Configuration / DKIM配置　845

DKIM: DomainKeys Identified Mail / DKIM：域密钥身份识别邮件　846

DKIM miltering / DKIM邮件过滤　846

DKIM configuration in amavisd-new / 在amavisd-new中配置DKIM　849

DKIM in sendmail / sendmail中的DKIM　850

DKIM in Exim / Exim中的DKIM　850

DKIM in Postfix / Postfix中的DKIM　852

Integrated email solutions / 综合的电子邮件解决方案　853

Recommended reading / 推荐读物　854

Exercises / 习题　855

CHAPTER 21　NETWORK MANAGEMENT AND DEBUGGING　859

第 21章　网络管理和调试

Network troubleshooting / 网络故障的检测　860

ping: check to see if a host is alive / ping：检查主机是否正常　861

SmokePing: gather ping statistics over time / SmokePing：ping的累计统计　864

traceroute: trace IP packets / traceroute：跟踪IP包　865

netstat: get network statistics / netstat：获得网络统计信息　868

Inspecting interface configuration information / 检查接口的配置信息　868

Monitoring the status of network connections / 监视网络连接的状态　870

Identifying listening network services / 标识正在监听的网络服务　871

Examining the routing table / 检查路由表　871

Viewing operational statistics for network protocols / 查看各种网络

协议运行的统计信息　872

Inspection of live interface activity / 检查工作接口的活动　873

Packet sniffers / 包嗅探器　874

tcpdump: industry-standard packet sniffer / tcpdump：业界标准的

包嗅探器　875

Wireshark and TShark: tcpdump on steroids / Wireshark和TShark：

增强型的tcpdump　877

The ICSI Netalyzr / ICSI Netslyzr　878

Network management protocols / 网络管理协议　879

SNMP: the Simple Network Management Protocol / SNMP：简单网络管理协议　880

SNMP organization / SNMP的组织结构　881

SNMP protocol operations / SNMP协议的操作　882

RMON: remote monitoring MIB / RMON：远程监视MIB　883

The NET-SNMP agent / NET-SNMP代理程序　883

Network management applications / 网络管理应用程序　884

The NET-SNMP tools / NET-SNMP工具　885

SNMP data collection and graphing / SNMP数据的采集和绘图　886

Nagios: event-based service monitoring / Nagios：基于事件的SNMP

和服务监视工具　887

The ultimate network monitoring package: still searching / 终 极网络

监测软件包：仍在寻觅　888

Commercial management platforms / 商业管理平台　889

NetFlow: connection-oriented monitoring / NetFlow：面向连接的监视　890

Monitoring NetFlow data with nfdump and NfSen / 用nfdump和

Nfsen监测NetFlow数据　890

Setting up NetFlow on a Cisco router / 在思科路由器上配置NetFlow　892

Recommended reading / 推荐读物　893

Exercises / 习题　894

CHAPTER 22　SECURITY　896

第 22章　安全

Is UNIX secure / UNIX安全吗？　897

How security is compromised / 安全性是如何受损害的　898

Social engineering / 社交工程　898

Software vulnerabilities / 软件漏洞　899

Configuration errors / 配置错误　900

Security tips and philosophy / 安全的技巧和思想　901

Patches / 补丁　901

Unnecessary services / 不必要的服务　902

Remote event logging / 远程的事件日志　902

Backups / 备份　903

Viruses and worms / 病毒和蠕虫　903

Trojan horses / 特洛伊木马　903

Rootkits / 隐匿木马　904

Packet filtering / 包过滤　904

Passwords / 口令　905

Vigilance / 警惕性　905

General philosophy / 普遍原则　905

Passwords and user accounts / 口令和用户账号　906

Password aging / 口令时限　906

Group logins and shared logins / 组登录名和共享登录名　907

User shells / 用户的shell　907

Rootly entries / 获得root权限的办法　907

PAM: cooking spray or authentication wonder / PAM：验证奇才　908

System support for PAM / 系统对PAM的支持　908

PAM configuration / 配置PAM　908

A detailed Linux configuration example / Linux上详细配置举例　911

Setuid programs / setuid程序　912

Effective use of chroot / 有效使用chroot　913

Security power tools / 加强安全的工具　914

Nmap: network port scanner / nmap：网络端口扫描程序　914

Nessus: next-generation network scanner / Nessus：下一代的网络

扫描程序　916

John the Ripper: finder of insecure passwords / John the Ripper：

找出不安全的口令　916

hosts_access: host access control / hosts_acces：主机访问控制　917

Bro: the programmable network intrusion detection system / Bro：

可编程的网络入侵检测系统　918

Snort: the popular network intrusion detection system / Snort：

流行的网络入侵检测系统　918

OSSEC: host-based intrusion detection / OSSEC：基于主机的

入侵检测　919

Mandatory Access Control (MAC) / 强制访问控制（MAC）　922

Security-enhanced Linux (SELinux) / SELinux　923

Cryptographic security tools / 加密的安全工具　924

Kerberos: a unified approach to network security / Kerberos：

用于网络安全的统一方法　924

PGP: Pretty Good Privacy / PGP：很好的私密性　925

SSH: the secure shell / SSH：安全的shell　926

Stunnel / Stunnel　930

Firewalls / 防火墙　932

Packet-filtering firewalls / 包过滤防火墙　932

How services are filtered / 如何过滤服务　933

Stateful inspection firewalls / 状态检查防火墙　934

Firewalls: how safe are they / 防火墙保险吗　935

Linux firewall features / Linux的防火墙功能　935

Rules, chains, and tables / 规则、链和表　935

Rule targets / 规则目标　936

iptables firewall setup / 设置iptables防火墙　937

A complete example / 一个完整的例子　937

IPFilter for UNIX systems / UNIX系统的IPFilter　939

Virtual private networks (VPNs) / VPN　942

IPsec tunnels / IPSec隧道　943

All I need is a VPN, right / VPN就够了吗　943

Certifications and standards / 认证和标准　944

Certifications / 认证　945

Security standards / 安全标准　945

Sources of security information / 安全信息的来源　947

CERT: a registered service mark of Carnegie Mellon University /

CERT：卡耐基梅隆大学的注册服务商标　948

SecurityFocus.com and the BugTraqmailing list / SecurityFocus.com

网站和BugTraq邮递列表　948

Schneier on Security / 施耐德的安全博客　948

SANS: the System Administration, Networking, and Security Institute /

SANS：系统管理、网络和安全协会　948

Vendor-specific security resources / 厂商特有的安全资源　949

Other mailing lists and web sites / 其他邮递列表和网站　950

What to do when your site has been attacked / 如何对付站点攻击　950

Recommended reading / 推荐读物　952

Exercises / 习题　954

CHAPTER 23　WEB HOSTING　956

第 23章　Web主机托管

Web hosting basics / Web主机托管的基本知识　957

Resource locations on the web / Web上资源的位置　957

Uniform resource locators / 统一资源定位符　957

How HTTP works / HTTP工作原理　958

Content generation on the fly / 即时生成内容　959

Application servers / 应用服务器　960

Load balancing / 负载均衡　961

HTTP server installation / HTTP服务程序的安装　963

Choosing a server / 选择服务器软件　963

Installing Apache / 安装Apache　964

Configuring Apache / 配置Apache　965

Running Apache / 运行Apache　966

Analyzing log files / 分析日志文件　966

Optimizing for high-performance hosting of static content /

高性能主机托管的静态内容优化　967

Virtual interfaces / 虚拟接口　967

Using name-based virtual hosts / 使用基于名字的虚拟主机　968

Configuring virtual interfaces / 配置虚拟接口　968

Telling Apache about virtual interfaces / 告诉Apache有关虚拟

接口的信息　971

The Secure Sockets Layer (SSL) / SSL　971

Generating a Certificate Signing Request / 产生签发证书的请求　972

Configuring Apache to use SSL / 配置Apache使用SSL　973

Caching and proxy servers / 缓存和代理服务程序　974

Using the Squid cache and proxy server / Squid缓存和代理服务器　975

Setting up Squid / 设置Squid　875

Reverse-proxying with Apache / Apache的反向代理　976

Scaling beyond your limits / 超越上限　977

Cloud computing / 云计算　978

Co-lo hosting / 主机代管　978

Content distribution networks / 内容分发网络　978

Exercises / 习题　979

SECTION THREE: BUNCH O' STUFF　981

第三部分　其他管理技术

CHAPTER 24　VIRTUALIZATION　983

第 24章　虚拟化技术

Virtual vernacular / 虚拟技术的种类　984

Full virtualization / 全虚拟化　985

Paravirtualization / 半虚拟化　986

Operating system virtualization / 操作系统级虚拟化　986

Native virtualization / 原生虚拟化　987

Cloud computing / 云计算　987

Live migration / 动态迁移　988

Comparison of virtualization technologies / 虚拟化技术比较　988

Benefits of virtualization / 虚拟化技术的好处　988

A practical approach / 实施方案　989

Virtualization with Linux / Linux虚拟化　991

Introduction to Xen / Xen简介　991

Xen essentials / Xen基础知识　992

Xen guest installation with virt-install / 用virt-install安装Xen

的guest系统　993

Xen live migration / Xen动态迁移　994

KVM / KVM　995

KVM installation and usage / KVM的安装和使用　996

Solaris zones and containers / Solaris的zone和container　997

AIX workload partitions / AIX的WPAR　1001

Integrity Virtual Machines in HP-UX / HP-UX的IVM　1003

Creating and installing virtual machines / 创建和安装虚拟机　1003

VMware: an operating system in its own right / VMWARE　1005

Amazon Web Services / 亚马逊的AWS　1005

Recommended reading / 推荐读物　1010

Exercises / 习题　1010

CHAPTER 25　THE X WINDOW SYSTEM　1011

第 25章　X窗口系统

The display manager / X显示管理器　1013

Process for running an X application / 运行一个X应用程序　1014

The DISPLAY environment variable / 环境变量DISPLAY　1015

Client authentication / 客户机身份验证　1016

X connection forwarding with SSH / 用SSH转发X连接　1017

X server configuration / 配置X服务器　1019

Device sections / Device段　1021

Monitor sections / Monitor段　1021

Screen sections / Screen段　1022

InputDevice sections / InputDevice段　1022

ServerLayout sections / ServerLayout段　1024

xrandr: not your father’s X server configurator / xrandr：X服务器的

配置工具　1025

Kernel mode setting / 内核模式设定　1025

X server troubleshooting and debugging / 故障排查和调试　1026

Special keyboard combinations for X / X的特殊键盘组合　1026

When X servers attack / X服务器出问题　1027

A brief note on desktop environments / 桌面环境简述　1028

KDE / KDE　1029

GNOME / GNOME　1029

Which is better, GNOME or KDE / KDE和GNOME谁更好　1030

Recommended reading / 推荐读物　1030

Exercises / 习题　1031

CHAPTER 26　PRINTING　1032

第 26章　打印

Printing-system architecture / 打印系统的体系结构　1033

Major printing systems / 主要的打印系统　1033

Print spoolers / 打印　1034

CUPS printing / CUPS的打印　1034

Interfaces to the printing system / 打印系统的界面　1034

The print queue / 打印队列　1035

Multiple printers and queues / 多台打印机和打印队列　1036

Printer instances / 打印机实例　1036

Network printing / 网络打印　1036

Filters / 过滤器　1037

CUPS server administration. / CUPS服务器的管理　1038

Network print server setup / 设置网络打印服务器　1039

Printer autoconfiguration / 自动配置打印机　1040

Network printer configuration / 配置网络打印机　1040

Printer configuration examples / 打印机的配置举例　1041

Printer class setup / 设置打印机的类　1041

Service shutoff / 关闭服务　1041

Other configuration tasks / 其他配置工作　1042

Printing from desktop environments / 桌面打印环境　1043

kprinter: print documents / kprinter：打印文档　1044

Konqueror and printing / Konqueror和打印　1045

System V printing / SystemⅤ的打印　1045

Overview / 概述　1045

Destinations and classes / 打印目的地及打印类　1046

A brief description of lp / lp简述　1047

lpsched and lpshut: start and stop printing / lpsched与lpshut：

启动和停止打印　1047

lpadmin: configure the printing environment / lpadmin：配置打印环境　1048

lpadmin examples / lpadmin举例　1050

lpstat: get status information / lpstat：获取状态信息　1051

cancel: remove print jobs / cancel：删除打印作业　1051

accept and reject: control spooling / accept和reject：控制假脱机处理　1051

enable and disable: control printing / enable和disable：控制打印　1052

lpmove: transfer jobs / lpmove：转移作业　1052

Interface programs / 接口程序　1052

What to do when the printing system is completely hosed /

lp系统混乱状况的处理方法　1053

BSD and AIX printing / BSD和AIX的打印　1054

An overview of the BSD printing architecture / BSD打印系统的

体系结构概述　1054

Printing environment control / 控制打印环境　1055

lpd: spool print jobs / lpd：假脱机打印程序　1056

lpr: submit print jobs / lpr：提交打印作业　1056

lpq: view the printing queue / lpq：查看打印队列　1056

lprm: remove print jobs / lprm：删除打印作业　1057

lpc: make administrative changes / lpc：管理性修改　1057

The /etc/printcap file / /etc/printcap文件　1059

printcap variables / printcap变量　1060

What a long, strange trip it’s been / 漫长和奇特的历程　1065

Printing history and the rise of print systems / 打印的历史和打印

系统的出现　1065

Printer diversity / 打印机的多样性　1066

Common printing software / 常用的打印软件　1067

Printer languages / 打印机的语言　1068

PostScript / PostScript　1069

PCL / PCL　1069

PDF / PDF　1070

XPS / XPS　1070

PJL / PJL　1070

Printer drivers and their handling of PDLs / 打印机驱动程序

及其对PDL的处理　1071

PPD files / PPD文件　1072

Paper sizes / 纸型　1073

Printer practicalities / 实际使用打印机的问题　1075

Printer selection / 打印机的选择　1075

GDI printers / GDI打印机　1076

Double-sided printing / 双面打印　1076

Other printer accessories / 其他打印机配件　1077

Serial and parallel printers / 串口和并口打印机　1077

Network printers / 网络打印机　1077

Other printer advice / 给打印机的其他建议　1077

Troubleshooting tips / 故障排查的技巧　1081

Restarting a print daemon / 重启打印守护进程　1081

Logging / 日志　1082

Problems with direct printing / 直接打印的问题　1082

Network printing problems / 网络打印的问题　1082

Distribution-specific problems / 发行版本特有的问题　1083

Recommended reading / 推荐读物　1083

Exercises / 习题　1084

CHAPTER 27　DATA CENTER BASICS　1085

第 27章　数据中心基础

Data center reliability tiers / 数据中心的可靠性级别　1086

Cooling / 冷却　1087

Electronic gear / 电子设备　1088

Light fixtures / 照明设备　1088

Operators / 操作人员　1089

Total heat load / 总的热负荷　1089

Hot aisles and cold aisles / 冷热通道　1089

Humidity / 湿度　1091

Environmental monitoring / 环境监视　1091

Power / 供电　1091

Rack power requirements / 机架的供电要求　1092

kVA vs. kW / kVA和kW　1093

Remote control / 远程控制　1094

Racks / 机架　1094

Tools / 工具　1095

Recommended reading / 推荐读物　1095

Exercises / 习题　1096

CHAPTER 28　GREEN IT　1097

第 28章　绿色IT

Green IT initiation / 绿色IT的兴起　1098

The green IT eco-pyramid / 绿色IT的生态金字塔　1099

Green IT strategies: data center / 绿色IT策略：数据中心　1100

Application consolidation / 应用合并　1101

Server consolidation / 服务器合并　1102

SAN storage / SAN存储　1103

Server virtualization / 服务器虚拟化　1103

Only-as-needed servers / 随用随开的服务器　1104

Granular utilization and capacity planning / 细粒度使用和容量规划　1104

Energy-optimized server configuration / 优化能源的服务器配置　1104

Cloud computing / 云计算　1106

Free cooling / 免费冷却　1106

Efficient data center cooling / 数据中心的高效冷却　1106

Degraded mode for outages / 停运时的降级模式　1106

Equipment life extension / 延长设备寿命　1107

Warmer temperature in the data center / 数据中心的较高温度　1108

Low-power equipment / 低功率设备　1108

Green IT strategies: user workspace / 绿色IT策略：用户空间　1108

Green IT friends / 绿色IT的朋友　1110

Exercises / 习题　1111

CHAPTER 29　PERFORMANCE ANALYSIS　1112

第 29章　性能分析

What you can do to improve performance / 做什么可以提高性能　1114

Factors that affect performance / 影响性能的因素　1115

How to analyze performance problems / 如何分析性能问题　1117

System performance checkup / 系统性能检查　1118

Taking stock of your hardware / 盘点硬件　1118

Gathering performance data / 收集性能数据　1121

Analyzing CPU usage / CPU使用情况分析　1121

How the system manages memory / 系统如何管理内存　1124

Analyzing memory usage / 内存使用情况分析　1125

Analyzing disk I/O / 磁盘I/O分析　1127

xdd: analyze disk subsystem performance / xdd：分析磁盘子

系统的性能　1129

sar: collect and report statistics over time / sar：连续采集和

报告统计信息　1129

nmon and nmon_analyser: monitor in AIX / nmon和nmon_analyser：

AIX上的监视工具　1130

Choosing a Linux I/O scheduler. / 选择Linux的I/O调度器　1130

oprofile: profile Linux systems in detail / oprofile：详细剖析

Linux系统　1131

Help! My system just gotreally slow! / 求助！系统为何越来越慢　1131

Recommended reading / 推荐读物　1133

Exercises / 习题　1134

CHAPTER 30　COOPERATING WITH WINDOWS　1135

第30章　同Windows协作

Logging in to a UNIX system from Windows / 从Windows登录到UNIX系统　1135

Accessing remote desktops / 远程桌面访问　1136

X server running on a Windows computer / 在Windows计算机上运行

X服务器　1136

VNC: Virtual Network Computing / VNC：虚拟网络计算　1138

Windows RDP: Remote Desktop Protocol / Windows RDP：

远程桌面协议　1138

Running Windows and Windows-like applications / 运行Windows和类似

Windows的应用　1139

Dual booting, or why you shouldn’t / 双重引导，为何不该用　1140

Microsoft Office alternatives. / 微软Office的替代软件　1140

Using command-line tools with Windows / 在Windows上使用命令行工具　1140

Windows compliance with email and web standards / Windows遵守

电子邮件和Web标准　1141

Sharing files with Samba and CIFS / 通过Samba和CIFS共享文件　1142

Samba: CIFS server for UNIX / Samba：UNIX的CIFS服务器　1142

Samba installation. / Samba的安装　1143

Filename encoding / 文件名编码　1145

User authentication / 用户身份验证　1145

Basic file sharing / 基本的文件共享　1146

Group shares / 用户组共享　1146

Transparent redirection with MS DFS / 用微软的DFS做透明重定向　1147

smbclient: a simple CIFS client / smbclient：简单的CIFS客户端　1148

Linux client-side support for CIFS / Linux的客户端对CIFS的支持　1148

Sharing printers with Samba / 用Samba共享打印机　1149

Installing a printer driver from Windows. / 从Windows安装打印机

驱动程序　1151

Installing a printer driver from the command line / 从命令行安装

打印机驱动程序　1152

Debugging Samba / 调试Samba　1152

Active Directory authentication / Active Directory身份验证　1154

Getting ready for Active Directory integration / 准备好集成AD　1155

Configuring Kerberos for Active Directory integration / 配置Kerberos　1156

Samba as an Active Directory domain member / Samba作为

Active Directory的域成员　1157

PAM configuration / 配置PAM　1159

Alternatives to winbind / winbind的备选方案　1160

Recommended reading / 推荐读物　1160

Exercises / 习题　1161

CHAPTER 31　SERIAL DEVICES AND TERMINALS　1162

第31章　串行设备和串行终端

The RS-232C standard / RS-232C标准　1163

Alternative connectors / 备选连接器　1165

The DB-9 variant / DB-9连接器　1166

The RJ-45 variant / RJ-45连接器　1166

Hard and soft carrier / 硬载波和软载波　1167

Hardware flow control / 硬流控　1168

Serial device files / 串行设备文件　1168

setserial: set serial port parameters under Linux / setserial：把串口参数通

知给驱动程序　1169

Pseudo-terminals / 伪终端　1170

Configuration of terminals / 硬件终端的配置　1171

The login process / 登录过程　1171

The /etc/ttytype file / /etc/ttytype文件　1172

The /etc/gettytab file / /etc/gettytab文件　1173

The /etc/gettydefs file / /etc/gettydefs文件　1173

The /etc/inittab file / /etc/inittab文件　1174

getty configuration for Linux / Linux上的getty配置　1175

Ubuntu Upstart. / Ubuntu的Upstart　1176

Solaris and sacadm / Solaris和sacadm　1176

Special charactersand the terminal driver / 特殊字符和终端驱动程序　1177

stty: set terminal options / stty：设置终端的选项　1178

tset: set options automatically / tset：自动设置选项　1178

Terminal unwedging / 僵住的终端　1179

Debugging a serial line / 调试串行线　1180

Connecting to serial device consoles / 连接到串行设备的控制台　1180

Exercises / 习题　1182

CHAPTER 32　MANAGEMENT, POLICY, AND POLITICS　1183

第32章　管理、政策与政治

The purpose of IT / IT的目标　1184

Budgeting and spending / 预算和支出　1184

IT policy / IT政策　1185

Service level agreements / SLA　1186

The structure of an IT organization / IT职能机构的组成　1190

The foundation: the ticketing and task management system /

基础：工单和任务管理系统　1191

Common functions of ticketing systems / 工单系统的常见功能　1191

Ticket ownership / 工单的所有权　1192

User acceptance of ticketing systems / 用户对工单系统的接受程度　1192

Sample ticketing systems / 工单系统举例　1193

Ticket dispatching / 工单分派　1194

Skill sets within IT / IT内部的技能培养　1195

Time management / 时间管理　1196

The help desk / 咨询组　1196

Scope of services / 服务范围　1196

Help desk availability / 咨询可用性　1196

Help desk addiction / 咨询上瘾　1196

The enterprise architects / 企业构架师　1197

Make processes reproducible / 过程可再现　1197

Leave a trail of bread crumbs / 留下记录　1198

Recognize the criticality of documentation / 认可文档的重要性　1198

Customize and write code / 定制和编程　1198

Keep the system clean / 保持系统干净整洁　1198

The operations group / 运行组　1199

Aim for minimal downtime / 瞄准**短停机时间　1199

Document dependencies / 依靠文档　1199

Repurpose or eliminate older hardware / 重用或淘汰老硬件　1200

Maintain local documentation / 维护本地文档　1200

Keep environments separate / 保持环境独立　1204

Automate, automate, automate / 自动化　1205

Management / 管理的职能　1206

Leadership / 领导　1206

Personnel management / 人事管理　1207

Hiring / 聘用　1207

Firing / 解聘　1208

Mechanics of personnel management / 人事管理的机制　1209

Quality control / 质量控制　1209

Management without meddling / 管理但别管闲事　1210

Community relations / 社区关系　1210

Management of upper management / 管理上级　1211

Purchasing / 采购　1212

Conflict resolution / 化解矛盾　1213

Policies and procedures / 政策和规程　1215

The difference between policies and procedures / 政策和规程

之间的区别　1215

Policy best practices / 政策的**佳实践　1216

Procedures / 规程　1216

Disaster recovery / 灾难恢复　1217

Risk assessment / 风险评估　1217

Disaster management / 灾难管理　1218

Staff for a disaster / 处理灾难的人员准备　1220

Power and HVAC / 电源和HVAC　1220

Internet connection redundancy / 互联网连接的冗余性　1221

Security incidents / 安全事件　1222

Compliance: regulations and standards / 合规：规章与标准　1222

ITIL: the Information Technology Infrastructure Library /

ITIL：信息技术基础设施库　1225

NIST: the National Institute for Standards and Technology /

NIST：国家标准和技术研究所　1225

Legal issues / 法律问题（美国）　1226

Privacy / 隐私　1226

Policy enforcement / 落实政策　1227

Control = liability / 控制=义务　1228

Software licenses / 软件许可证　1228

Organizations, conferences, and other resources / 组织、会议及其他资源　1229

Recommended Reading / 推荐读物　1231

Exercises / 习题　1231