Setting up virtualnetwork in VMware. Suggestions

[Meresgi]

So doing a lot of self study work and applying what I know and learning more. Right now i'm setting up a virtual LAN in VMware Workstation, so far I have a 2008 DC, a 2003 server that I might make another DC and Email server, a Centos FTP/Apache server, an unbuntu desktop, a Windows 7 desktop and I might toss in a XP desktop as well.

Basically i'm going to be setting them all up to communicate with each other, run FTP/Web/Email and other services and after I have it all set up i'm going to jump in my backtrack machine and basically break into all the machines I can. My hardening the network class is going kind of slow (we're just now getting into Nmap) but ive jumped ahead and started using metasploit+armitage to break into the other lab computers, install backdoors and keyloggers and dump all the password hashes for future use.

Anyways, anyone have any suggestions on what I should add to the network? Tips on different things to work with to improve my skills? I plan on playing with PacketTracer or w/e the Cisco tool is as well and i'll probably set up Vyatta virtual routers and make a WAN at some point.

[Ratatapa]

In you dc I would do folder redirection and gpo could be useful

If you VMware is on pc I would add a 2nd vmnetwork and put a 2nd dc to do ad replication.

[Meresgi]

I'm doing AD replication and GPOs on my other VM for my AD class, though right now it's just Domain > child domain. That's probably a good idea to try to manage 2-3 domains that are in different forests. Gonna see if I can set up a trust with one of the Linux boxes too through Kerberos.

[Ratatapa]

I'm doing AD replication and GPOs on my other VM for my AD class, though right now it's just Domain > child domain. That's probably a good idea to try to manage 2-3 domains that are in different forests. Gonna see if I can set up a trust with one of the Linux boxes too through Kerberos.

What I mean, is implenting is good, but troubleshooting is really really important ( And I know that for me it<s harder to troubleshoout then implement

I got a situation that I got for you that we got at work last year (that game me head ache but finally fixed it)

Make a Forest with a primary DC

That DC must have AD, DNS GPO and DHCP
Make at least 3-4 more DC in the same forest
All of them with AD DNS GPO and DHCP (make them replicate with the first DC you made)
Don<t forget to create links in Sites in Trust. DC A and B must replicate from both sides, same from B and C and B and D (So to replicate from A to D it needs to do A to B then B to D)
Fill some DNS info and make sure all works
When everything works, take a snapshot on DC A. The continue to work for 2-3 days on it
2-3 days later restore the snapshot on DCA. And then Enjoy the problem.

When i joined my job the last tech did that fucking error to restore snapshot on a DC. Shit came after

This error will mostly happen due to a user error, but it's so easy to make that error

[Meresgi]

^ I'll try that Ratatapa.

I just finished setting up a basic samba share between Centos 6.3 and Windows 7, couldnt figure out why the fuck I couldn't access the share on the windows machine until it dawned on me that SELinux was being a fucker and i had to go change the folder settings to let it through. That's like the 5th time that has happend where SELinux stopped something from working like it should and I sat there for an hour or two going "WHY WONT YOU WORK?!"

[Ratatapa]

^ I'll try that Ratatapa.

I just finished setting up a basic samba share between Centos 6.3 and Windows 7, couldnt figure out why the fuck I couldn't access the share on the windows machine until it dawned on me that SELinux was being a fucker and i had to go change the folder settings to let it through. That's like the 5th time that has happend where SELinux stopped something from working like it should and I sat there for an hour or two going "WHY WONT YOU WORK?!"

If it happens like me, after maybe 4-5h after the snapshot restore, your event log will be filles with errors

FILLED I TELL YA