Golgotha worklog

From K-LUG Wiki
Jump to navigationJump to search

Golgotha needs some attention sometimes. Here is the currrent TODO list.

Critical

  • Sendmail (working)
    • 'FIX TODAY: Slow response time due to spam measures' (grey listing turned off 02/17/2006)
    • Mailman
    • SSL/TLS (done)
    • AUTH (done)
    • Milter (on by default)
    • MIMEDefang (done)
    • ClamAV-milter (replaced with MIMEDefang) - Seems to be dying randomly, either a config issue or we need to setup MIMEdefang to run it instead (if possible).
    • SpamAssassin (MIMEDefang) - Installed port, not configured or running, also installed milter-spamd but not configured or running, see /root/milter-spamd.install.
    • SSL Certs (done)
  • IMAP / POP3
    • IMAP SSL
    • POP3 (need to recreate SSL cert)
  • PF
    • Tighten Rules down a bit (rules have been optimized to keep pf.conf shorter)
    • setup reactive monitoring to ban hosts that try to brute, excessively scan etc.
  • OS Patches (done)
    • 001-020
  • Ports - Update to latest Patch branch (done)
  • ClamAV
    • Install (done)
    • Configure cron to update rules. (done, freshclam is running as a daemon, see rc.local and rc.conf.local)

Important

  • SNMP
    • Config (this should be done)
    • Verify that it is bound to localhost only
  • MRTG
    • Track fxp0 usage (done)
    • Track sendmail stats (partialy done)
    • Track Disk Usage
    • Track CPU Usage
    • Possibly track a few stat apps (IRC etc)
    • Possibly look into using rrdtool via Cacti
  • compat_linux(8)
    • Update Linux libs from centos
  • WWW
    • Migrate from OpenBSD Apache to current 2.2.0 Tree
    • Build PHP 5
    • setup SSL
    • verify userdirs are working properly.
  • Named
    • fix some of the lame config'd hosts.
  • IP Aliases (DONE)

Non/Critical

  • Teamspeak
    • This is dependent on the linux libs. Currently it takes massive cpu time.
  • WWW
    • Setup a decent chroot system
  • Named
    • Check into the denied error when using ns-update remotely
  • System
    • Cleanup old accounts
      • User accounts
      • databases
      • websites
  • Wishlist
    • Jabber Server (May not be wise until hardware upgrade)

Hardware

Hardware has been upgraded to an Intel Pentium4 3.2GHz, 1GB RAM, DFI 915P-TAG Motherboard. Also added two (2) 200GB Maxtor 6L200P0 drives for an eventual RAID 1 Mirror for home directories.