[svlug] new svlug system

[Lord Sauron]

On Tuesday 19 September 2006 01:41, Alvin Oga wrote:
> hi ya svlug'erz
>
> ==
> == another (crazy) idea
> ==
>
> - im wondering and sitting here nervously and
>   with itchy fingers to fix up the existing box
>
>   however, we have no backup and no 2nd svlug.org server yet
>
> ///////////////////////////////////////////////////////////////
> - would anybody out in svlug world care that we take it
>   down for an hr or two to rebuild a new distro onto a new disk
> ///////////////////////////////////////////////////////////////

I have no internet connection to host from, however...

My server is currently gathering dust in my bedroom.  I could loan it to 
SVLUG for a week or so while the old server is being resurrected.  My 
server is:

AMD Athlon 1400 Socket A
512 MB DDR SDRAM
60 GB IBM DeathStar HDD
NVIDIA GeForce 4 MX 4000 128 MB AGP 8x/4x
100/10 Ethernet
*working* CD-ROM drive
Debian 3.1 Sarge (currently installed - I'm going to put Gentoo on it 
before my site goes up, so if you wipe the OS I really don't care - 
just don't put Windows on it - it's been through enough of that!)

It has some fairly adaquate cooling capabilties.  It's in a gigantic ATX 
Full tower case though.

> 	- the machine was previously offline from say 4pm - midnight
> 	on sat while it lost it's "juice" ( power ) :-)
>
>   and than restore the current html pages and mail archives
>
> 	- i'll throw in a freebie ( a new 300GB disk ) from fries

Consider a WD Raptor - they're MTBF is amazing.

> 	i'd be worried about it's reliability if i was you
> 	for anything one buys from fries which is the whole
> 	point of buying at fries.. it's cheap and convenient

Much of what's a fries does work, it's just their bargain bins that you 
have to be extra careful of.  Ex. their Emperex CD/CDRWs... still mad 
about that dead disk.

> 	- normally we/i buy disks by the "case" (20-40 at a time )
> 	from distributors where reseller permits is required

Dang.  Left me speechless there.

> - it'd be great if we can do this on tue night ... 10pm pst ??
>
> 	- we can than create the bind9 name.conf files for
> 	  its own dns too and update svlug.org with the proper
> 	  dns info for itself
>
> - the current machine surprisingly survived lots of attacks
>   so those that had built, config'd and defined it did a good job
>
>   however, from what everybody hears and agrees, it is no longer
>   maintainable and "upgradable" to add new features/functions
>
> 	eg ...  ( not to hide info .. )
>
> 	it's woody .. but i'd assume its corrupt db since
> 	everybody says its "un-maintainable" and bind can't
> 	be installed ( i donno .. i;d like to try after we have
> 	a separate working system )

Wow.  That's old.

> 	it has gr-sec for those that didn't know
>
> 	it has ippl .. which is a 2-second solution to know where
> 	all connection comes from
>
> 	there seems to be otp but i don't think it's working right
> 	since i can use the same pwd more than once to get in :-)
>
> - this new system build will be done by "experienced" installers
>   instead of newbies due to the nature of the machine and
>   hardened accordingly
>
> 	- how you want it hardened can be discussed/polite-flamebait
> 	so everybody can learn what is "hardening" etc

Educate me!  I know it makes it more secure, but I don't know the "how" 
part.

-- 
http://lordsauronthegreat.googlepages.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: not available
Url : http://kenny.linuxmafia.com/pipermail/svlug/attachments/20060919/48d41e62/attachment.pgp