ServerSetupFedora22: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| Line 42: | Line 42: | ||
# Enable samba | # Enable samba | ||
## Add TCP139,445/24 to IPTables | ## Add TCP139,445/24 to IPTables | ||
## <pre>chkconfig smb on; chkconfig nmb on;</pre> | ## <pre># chkconfig smb on; chkconfig nmb on;</pre> | ||
# Enable iSCSI | # Enable iSCSI | ||
## Add TCP3260/24 | ## Add TCP3260/24 | ||
| Line 59: | Line 59: | ||
# Verify all log files in /var/log are not giving any errors or notifications | # Verify all log files in /var/log are not giving any errors or notifications | ||
# Check logs for whats growing! <pre>ls -alR /var/log | grep ^- | awk {'print $5" "$8'} | sort -k 2| sort -n</pre> | # Check logs for whats growing! <pre># ls -alR /var/log | grep ^- | awk {'print $5" "$8'} | sort -k 2| sort -n</pre> | ||
Revision as of 00:09, 2 August 2011
# yum install man screen wget rsync fail2ban mailx fdupes sendmail-cf strace \ logwatch etckeeper OpenIPMI ipmitool sysstat mutt clamav clamav-update nfs-utils \ lm_sensors hddtemp apcupsd apcupsd-cgi smartmontools \ mod_auth_pam mod_auth_shadow php-pecl-apc # java-1.6.0-openjdk.x86_64 nss-mdns
- Install etckeeper
- Disable root login via ssh
- Add TCP22/0 to IPTables
- Enable sudo
- Install fail2ban
- yum remove unneeded software
- yum update
- Enable SElinux
- Extend days of sysstat logging
- Configure GRUB serial console redirection
- Configure kdump for system panics
- Configure apcupsd for UPS alerts
- Configure Time Server for local network access
- Add UDP123/24 to IPTables
- Configure rsyslog for network clients
- Add UDP514/24 to IPTables
- Setup mail relay
- Remove 127.0.0.1 /etc/mail/sendmail.mc
# echo drew > /root/.forward; echo "andrew: drew" >> /etc/aliases; newaliases; echo "root: drew" >> /etc/aliases; newaliases
- Add TCP25/0 to IPTables
- Configure smartd/hddtemp for disk monitoring
- ^ Configure thermal alerts for server
- Configure logwatch
- Setup clamav virus protection for Samba and weekly scan
- Mount raid array
- Configure md alerts
- Enable NFS
- Add TCP2049/24 to IPTables
- Disable NFSv2/3 /etc/sysconfig/nfs
- Enable samba
- Add TCP139,445/24 to IPTables
# chkconfig smb on; chkconfig nmb on;
- Enable iSCSI
- Add TCP3260/24
- ^ Configure bacula and web interface
- Setup cron jobs
- Keep anacron from waking me up at night!
# vi /etc/anacrontab // START_HOURS_RANGE
- Keep anacron from waking me up at night!
- Configure MythTV / MythWeb
- Add TCP443/0 to IPTables
- Configure mod_auth_pam / mod_auth_shadow / pecl-php-apc / phpMyAdmin
- Configure DrewaWiki / WebDAV
- Verify all log files in /var/log are not giving any errors or notifications
- Check logs for whats growing!
# ls -alR /var/log | grep ^- | awk {'print $5" "$8'} | sort -k 2| sort -n