Internship Project Summary
During the internship, I set up and secured a Linux VPS server under the mentorship of Slađan Ilić. The main tasks included:
- Reinstalling Linux and configuring hostname and domain.
- Securing SSH: changed default port, disabled password login, enabled SSH key authentication.
- Installing and configuring Apache, PHP, MySQL (LAMP) and FTP access.
- Creating virtual hosts and setting up the directory structure for the website.
- Configuring DNS records and domain access via BIND.
- Installing Let’s Encrypt SSL certificates and setting up auto-renewal with HSTS.
- Created a MySQL database with limited-access user.
Technologies used: Apache, PHP, MySQL, WordPress, WireGuard, BIND, FTP, Let’s Encrypt, phpMyAdmin.
In addition to server administration, I also worked with a Cisco ASA 5505 firewall, where I:
- Configured inside and outside interfaces, VLANs, and assigned IP addressing.
- Defined security levels and enabled routing between interfaces.
- Created and applied access-lists (ACLs) to filter inbound and outbound traffic.
- Allowed specific services (SSH, HTTP, HTTPS, DNS) and blocked unauthorized access with logging.
- Configured NAT rules and port forwarding to expose internal services to the internet.
- Monitored traffic using CLI tools and analyzed rule hit counts.
- Verified connectivity and security rules using ping, traceroute, and log analysis.