/[cvs]/jonen/notes/notes_2003-02.twingle

Diff of /jonen/notes/notes_2003-02.twingle

Parent Directory | Revision Log | View Patch Patch

-revision 1.1 by jonen,
Sun Mar  9 16:36:37 2003 UTC
+revision 1.7 by jonen,
Thu Mar 13 22:42:31 2003 UTC
 Line 12
        o read more about BSD package systems (pkg, cvsup)
          x for simple package installation/de-installation use pkg
            x install downloaded package:
-               :# pkg_add <package>-<version>.tgz
+               :# pkg_add {package}-{version}.tgz
            x install package via remote server(only if package is available as *latest*):
-                 pkg_add -r <package>.tgz
+                 pkg_add -r {package}.tgz
          x using cvsup
-           x newbies could use cvsupit (not what it really does..)
+           x read http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvsup.html
+           x newbies could use cvsupit:
                :# pkg_add -r cvsupit.tgz
              - cvsupit will proberly ask you for the default values it
                place at /etc/cvsupfile, which is used by cvsup
-Line 24
+Line 25
            x if /etc/cvsupfile already exists and you know what you do,
               this command will update your system (maybe run it via cron...):
                :# /usr/local/bin/cvsup -g -L 2 /etc/cvsupfile
+              where '-g' tells cvsup not to use a GUI, '-L 2' sets default output level to 2
+           x for available cvs tags, look at http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvs-tags.html
        o whats about daemon start-stop scripts (like at linux: /etc/init.d/) ?
        x configure and compile custom kernel:
          x read http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-building.html
-Line 41
+Line 44
        x use packet fiters (firewall):
          x read http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html
          x some options at the kernel have to be enabled:
-         <pre style="font-size:10px">
+           - options IPFIREWALL
-           options IPFIREWALL                       #Compiles into the kernel the code for packet filtering.
+            Compiles into the kernel the code for packet filtering.
-           options IPFIREWALL_VERBOSE    #Enables code to allow logging of packets through syslogd.
+           - options IPFIREWALL_VERBOSE
-                                                                   # Without this option, even if you specify that packets should be logged in the filter rules,
+            Enables code to allow logging of packets through syslogd.
-                                                                   #  nothing will happen.
+            Without this option, even if you specify that packets should be logged in the filter rules,
-           options IPFIREWALL_VERBOSE_LIMIT=10      #Limits the number of packets logged through syslogd on a per entry basis.
+            nothing will happen.
-                                                                                     # You may wish to use this option in hostile environments in which you want to log firewall activity,
+           - options IPFIREWALL_VERBOSE_LIMIT=10
-                                                                                     # but do not want to be open to a denial of service attack via syslog flooding.
+            Limits the number of packets logged through syslogd on a per entry basis.
-                                                                                     # When a chain entry reaches the packet limit specified, logging is turned off for that particular entry.
+            You may wish to use this option in hostile environments in which you want to log firewall activity,
-                                                                                     # To resume logging, you will need to reset the associated counter using the ipfw(8) utility:
+            but do not want to be open to a denial of service attack via syslog flooding.
-                                                                                     #        ipfw zero 4500
+            When a chain entry reaches the packet limit specified, logging is turned off for that particular entry.
-                                                                                     #    Where 4500 is the chain entry you wish to continue logging.
+            To resume logging, you will need to reset the associated counter using the ipfw(8) utility:
-           options IPFIREWALL_DEFAULT_TO_ACCEPT     #This changes the default rule action from ``deny'' to ``allow''.
+                   :# ipfw zero 4500
-                                                                                         # This avoids the possibility of locking yourself out if you happen to boot a kernel with IPFIREWALL support but have not configured your firewall yet.
+            Where 4500 is the chain entry you wish to continue logging.
-                                                                                         # It is also very useful if you often use ipfw(8) as a filter for specific problems as they arise.
+           - options IPFIREWALL_DEFAULT_TO_ACCEPT
-                                                                                         # Use with care though, as this opens up the firewall and changes the way it works.
+            This changes the default rule action from ``deny'' to ``allow''.
-          </pre>
+            This avoids the possibility of locking yourself out if you happen to boot a kernel with IPFIREWALL support but have not configured your firewall yet.
+            It is also very useful if you often use ipfw(8) as a filter for specific problems as they arise.
+            Use with care though, as this opens up the firewall and changes the way it works.
          x firewall is enabled at /etc/rc.conf (or /etc/rc.conf.local)
               firewall_enabled = "YES"
-              firewall_type = "<firewall_type>"
+              firewall_type = "{firewall_type}"
-           x <firewall_type> is either a case at /etc/rc.firewall (/etc/rc.firewall6 for ipv6)
+           x where {firewall_type} is either a case at /etc/rc.firewall (/etc/rc.firewall6 for ipv6)
               or some custom file to read rules from.
            x  Use firewall_type = "OPEN" for default policy 'OPEN' (allow all)
+   - Backup:
+     x bacula (http://www.bacula.org)
+        Bacula is a set of computer programs that permit you (or the system administrator) to manage backup,
+        recovery, and verification of computer data across a network of computers of different kinds.
+        In technical terms, it is a network client/server based backup program.
+        Bacula is relatively easy to use and efficient, while offering many advanced storage management features
+        that make it easy to find and recover lost or damaged files.
+        Bacula source code has been released under the GPL version 2 license.
+       x created debian package, cause we can't found any other
+         x wrote some notes about how to build an debian binary package
+             http://www.netfrag.org/~jonen/computing/docs/build_bacula_deb.html
+         o create 'postinst' and 'prerm' scripts for saving configs on update, etc.
+       x tested network backup with Director, Storage Daemon and File Daemon(Client)
+          at different hosts, works great!
+       x tested backup to FileStorage, instead of using tapes drives
+          (if someone would like to sponsor some tape drive, you're more than welcome!)
+        notes:
+         x remember to use different 'LabelFormat' filename at each pool !
+         x use compression at 'FileSet' definition, where GZIP is equal to GZIP6, means compression-level 6 (1-9)
+          example:
+            # ====== snip FileSet ============
+            FileSet {
+              Name = "Full Set"
+              Include = signature=MD5 compression=GZIP {
+              /home
+              }
+             Exclude = { *.o }
+           }
+            # ====== snip FileSet ============
    - QoS (Quality of Services)
      o check it out !
-Line 89
+Line 124
         x integrated new FormProcessing classes from phphtmllib (released one day after interface to binaryclouds Formbuilder was written ;)
           x refactored DataItem to use now phphtmllib form processing instead of interface to binarycload
             o review code and move to phphtmllib
       o XOOPS (http://xoops.org)
           XOOPS is a dynamic OO (Object Oriented) based open source portal script written in PHP.
           It is the ideal tool for developing small to large dynamic community websites, intra company portals,
-Line 120
+Line 154
           - ldap will check your ticket pricipial against its acl's !
        o 'libpam-ldap' from Turbo is bad, don't use it !! (remember at 'apt-get upgrade' !!)
        o write this down in some (existing e.g. sendmail?) howto
      - Sendmail
        o research some about sendmail-cluster, 2 mx records, howto to set up second mx/cluster?
         x backup mx:
-Line 150
+Line 184
         - Create Database
           :# mysqladmin create <database>
         - Set Privileges on databases(creates user too, if not exists...):
-            mysql>grant all on <database>.* to <user> identified by "<pass>";
+            mysql>grant all on {database}.* to {user} identified by "{pass}";
-            mysql>grant all on <database>.* to <user>@<domain> identified by "<pass>";
+            mysql>grant all on {database}.* to {user}@{domain} identified by "{pass}";
    - Document saving:

 Legend:



Removed from v.1.1
 


changed lines


 
Added in v.1.7
 Legend:



Removed from v.1.1
 


changed lines


 
Added in v.1.7
-Removed from v.1.1
+Added in v.1.7

MailToCvsAdmin">MailToCvsAdmin	ViewVC Help
Powered by ViewVC 1.1.26